Set strategy in the boardroom.
Still write the code.
Twenty-five years of security leadership for boards, governments, and critical infrastructure, as an engineer and architect across quantitative risk, secure AI, and SOC engineering. Antan IRM, the risk platform I built and use with clients, is one of the tools. Still close to the keyboard.
- P10$1.2M
- P50$4.8M
- P90$11.6M
Senior advisory and delivery across the security stack
From board-grade risk quantification to the code that runs in your SOC. Engagements scale from a four-week certification sprint to multi-year programme leadership.
Some of the work
A sample of anchor achievements across regulated, public-sector, and critical-infrastructure environments.
Designed and led the security function end to end across SecOps, security architecture, GRC, and awareness and training, at one of New Zealand's largest technology organisations, with ISO/IEC 27001:2022 and SOC 2 Type 2 as the outcome.
Designed and built a government agency's Security Operations Centre end to end across people, process, and technology, and drove a long-stalled PCI-DSS programme through to compliance.
Collaborated on the security architecture for one of New Zealand's most significant infrastructure projects.
Co-founded the OWASP New Zealand chapter and continues to contribute to the security community.
Antan IRM - risk that has left the spreadsheet
An AI-powered cyber risk platform I built and use for quantitative risk and decision analysis. It began as a replacement for the risk register in a spreadsheet and grew, function by function, into a tool that turns scattered security data into quantified, board-ready decisions, with a deterministic guardrail that keeps its own AI agents in check.
It is still a work in progress, and improving steadily. Try the demo, and if you would like to know more, get in touch. Feedback is welcome, and who knows, it may go public one day.
Explore Antan IRMLet's talk about your security programme
Considering a vCISO, a security strategy and architecture, a SOC uplift, an AI assurance review, or a secure web build? Get in touch. The first conversation is on the house.