I have over 25 years’ experience in Information Security and Risk Management, in the UK and New Zealand. I have helped organisations navigate the complexities of security and risk issues, effectively managed resources, and delivered on outcomes that have aligned with the business strategies, whilst maximizing the return from their security investments.
My background in FSI, Public Sector and Retail businesses operating in large scale environments, has provided the experiences and depth of capability required to provide leadership in the security and risk disciplines, including Head of Information Security for the Ministry of Justice.
Most recently I have been engaged to lead security for a number of large transformation projects, dealing with Governance, Cloud migration, Generative AI, and Risk Management for key agency systems. I usually lead teams providing either leadership or directly involved with design review, architecture, or controls design and implementation. However most of my engagements for CANDA centre around Security Certification & Accreditation activity for various mainly government systems.


