I've spent 25+ years inside the security function at some of the world's most regulated financial institutions — ING, Abu Dhabi Islamic Bank, ABN AMRO — building the programs that let them grow without getting breached, fined, or audited to a standstill.

What that's looked like in practice: • Cut attack surface by 60% by architecting Zero-Trust network models across enterprise environments • Led ISO 27001, PCI-DSS, NESA, and SWIFT CSP certification programs to 100% pass rates • Built and ran 24/7 Security Operations Centers maintaining 99.9% uptime for core banking services • Reported security KRIs directly to Boards of Directors, translating technical risk into business decisions
Today, that same discipline is going into AI. I lead AI governance for RAG and Agentic AI deployments — helping BFSI organisations adopt generative AI without losing control of GDPR/UK data protection compliance or audit readiness.

I work with organisations a few different ways: • As an embedded security/AI risk leader (CISO, Head of Security, VP Security Engineering) • As an independent advisor through Technosive, my consultancy — fractional CISO and security architecture engagements • As a virtual Data Protection Officer (vDPO), running GDPR/UK Data Protection compliance programs for organisations that need DPO coverage without a full-time hire • As an AI Product Owner, taking AI initiatives — RAG pipelines, Agentic AI workflows — from concept to production for BFSI teams • As a keynote speaker and executive trainer on cybersecurity, AI governance, and risk for Boards and technical teams

If any of that matches what you're trying to solve, send a message — happy to talk specifics