I help companies protect their data and provide the assurance stakeholders and clients want to see. 20+ years working in different verticals, organisation sizes and cultures gave me a good understanding of what works and what does not.
I have been in the trenches and seen many skeletons. No box-ticking or academic theory, only pragmatic and efficient advice to get the house in order.
Top human skills
Leadership
Leading by example, excellent team player, good listener, open-minded, pragmatic, SAFe/Agile practitioner, mentor, trainer, resource and conflict management.
Business
Stakeholder management, training and awareness, negotiation, business analysis, planning and delivery, SLA/OLA, KPI, suppliers/providers management.
Collaboration
Engagement with senior stakeholders (C-level), presentations (various levels, >100 attendees), meeting chair, tech lead, documentation (technical/end users).
Top hard skills
Governance, Risk and Compliance (GRC)
Information security governance, risk management, business continuity planning, compliance/regulatory frameworks (NZ Privacy Act, PSR-NZISM/New Zealand, PSPF/Australia, GDPR/EU, MAS/Singapore, HKMA/Hong Kong, ISO27k, PCI-DSS, NIST, OWASP...)
Security and Privacy
Security solution design, security/privacy reviews, platform/application hardening, application development security, network and cloud security, Identify and Access Management (IAM), DLP, cryptography, incident response
And more...
Enterprise / Solution / Infrastructure / Security architecture, cloud integration, solution design, scripting and coding, machine learning, storage platforms, HA and redundancy, networks, large multi-site environments, virtualisation...
Certifications
Among others
- CISSP - (ISC)2 Certified Information Systems Security Professional
- CISM - ISACA Certified Information Security Manager (highest score in Oceania)
- CRISC - ISACA Certified Risk and Information Systems Control (scored in top 5%)
- PCIP - PCI Security Standards Council - PCI Professional
- AWS Certified Solutions Architect - Associate
- Certified Scaled Agile Framework (SAFe) 5 Practitioner
- Machine Learning at Stanford University (online)
- ITIL, Microsoft, Cisco, VMWare, Compellent, Novell...