CISO is famously a "sacrificial lamb" sort of job, and it's certainly never one I would take on on a fractional basis (all of the risk but a lot less of the reward). I could understand having a fractional "security advisor" or "security lead", so maybe I'm just arguing about semantics, but again I'm primarily just interested in hearing about real world experiences with this sort of arrangement.