I have spent the better part of two decades where technology gets genuinely complicated: the place security frameworks collide with real engineering, and compliance stops being a box-ticking exercise and starts demanding craft.
The ground runs from hands-on systems and network engineering, through security consulting and architecture, to leading end-to-end security functions across industries and geographies. There is a Master’s and a stack of certifications below. None of that is what keeps me interested. What keeps me interested is the problem of making a complicated idea usable by the person who actually has to act on it.
Right now that means AI. I am building the tools and the corpus on this site around the frameworks that govern it, writing a book about why security leaders are the right people to do that work, and taking the argument to conferences. There is no product here and nothing for sale. All of it exists because I wanted to know the answer.
Outside work I am a husband and a father to two boys who keep the house happily loud. I raced on the velodrome for years, which taught me more about calculated risk than any framework has. I no longer race, but the bike is still in my life, mostly for the company and the coffee stop. When we are not on wheels we are usually somewhere outdoors, well off the beaten track.
