About
A small firm, on purpose.
Iron Path Advisory is an executive technology advisory firm: fractional CIO, CTO, and virtual CISO leadership for companies with real technology stakes and no one leading them.
The firm
Senior-only, by design.
Most technology problems in a growing company aren't really technology problems. They're leadership gaps: decisions no one owns, risk no one is accountable for, spend no one governs. Iron Path exists to close that gap without the cost or commitment of a full-time executive team.
We keep the firm deliberately small. Every engagement is led by a principal who does the work. No layers, no handoff to junior staff, no bench of names you'll never meet. That means we take on a limited number of clients at a time, and it means the person who assesses your environment is the person accountable for fixing it.
We position ourselves alongside management consultancies and boutique law firms, not tech vendors or MSPs. We don't resell hardware, we don't chase logos, and we'll tell you when the honest answer is that you don't need us yet.
The principals
You work with the people who do the work.
Two principals lead every engagement. When a specialized skill is needed, we bring in specialists we've worked with and trust, onboarded under our own governance and access controls, never a faceless bench.
Jonathan Fykes
Founding principal · Technology & operations
Iron Path Advisory is led by Jonathan Fykes, a technology executive with over a decade of IT leadership experience across cloud infrastructure, cybersecurity, and enterprise operations.
Jonathan has led IT organizations through ISO 27001 certifications, post-acquisition integrations, cloud migrations, and security program buildouts, serving industries including professional services, market research, healthcare, and finance. He has managed global teams, restructured vendor relationships, and built governance frameworks that hold up under audit.
A consistent thread across his work has been reshaping how the rest of the organization sees IT, moving it from a cost center that fixes things to a strategic function that drives decisions.
Matthew Reeder
Principal · Security, risk & compliance
Matthew Reeder specializes in cybersecurity governance, risk, and compliance advisory. He has led security program assessments, control testing, and audit readiness initiatives aligned with ISO 27001, ISO 27701, ISO 42001, and SSPA across enterprise environments. He holds a Master's in Information Assurance and Cybersecurity Management from the University of South Florida.
Jonathan and Matthew have worked together previously and have collaborated on client engagements spanning security program buildouts, compliance readiness, and IT governance.
- Senior by default. A principal owns your account, start to finish.
- Always reachable. Direct access to the people making decisions.
- Selective. We take on a limited number of engagements at a time.
Who we work with
Companies in motion, typically 10 to 1,000 people.
Past the point where technology can run itself, before the point where a full-time executive team makes sense.
- Private equity & portfolio companies
- Professional services
- Healthcare & life sciences
- Financial services
- SaaS & technology
- Manufacturing & logistics
- Post-acquisition integrations
Contact
See whether we're the right fit.
Tell us where technology is holding the business back. We'll tell you, honestly, whether we can help.
No sales funnel. No lead pipeline. Confidential.