Cybersecurity + Enterprise Resilience Consulting with a sense of ownership

As a former CISO I have the experience to execute your Security + Resilience projects

With experience spanning multiple years as Chief Information Security Officer in an InsurTech in one of the largest insurers worldwide, as well as several years in Cybersecurity Strategy Consulting, I bring value beyond simple recommendations.

I take on your problems as my own and understand the complexities and trade-offs of delivering security outcomes in technology-driven, fast-paced and regulated environments.

Reach out to discuss your current security and resilience challenges and I would love to make your problems my problems.

Reach out to me

Get in touch with me to discuss your current challenges around Cybersecurity and Enterprise Resilience.

My Services

    • Conducting Assessments of your entire Cybersecurity program or individual capabilities

    • Developing a long-term plan and strategy to achieve the desired target state for your Cybersecurity function, including executing the necessary change program

    • Improving your Governance, Risk + Compliance capabilities to not just meet regulatory compliance but improve your overall resilience, covering traditional IT, as well as Cloud and AI

    • Cybersecurity in M&A to assess, evaluate and mitigate the Cybersecurity risks you face from acquisitions, mergers, divestments and other M&A activity

    • Cyber Risk Quantification to assess the potential losses your organization could suffer from a Cybersecurity incident

    • Cybersecurity budget validation and optimization to meet the cost pressures of your organization or right-size your security budget

    • DevSecOps / Product Security to meet the demand for increased security without slowing down the velocity of innovation in your organization

    • Cloud Security to get your security organization ready for the cloud-age and exploit the vast security benefits public cloud can bring

    • Cloud Governance and Compliance to ensure your fast-moving technology organization is governed the right way and meeting your regulatory obligations

    • Crisis Management Programs to prepare, train and exercise your crisis organization so you don’t have to learn crisis management when your organization’s existence is at stake.

    • Enterprise Resilience Programs to get your entire organization ready for adverse events and fully exploit the competitive advantage a resilient organization can achieve.

  • Hire me as a virtual or interim CISO for when your company is not large enough to justify a full-time CISO or while you’re searching for your next CISO