Work
Work and Case Studies
Selected programmes and engagements. Clients and employers are kept anonymous.
Zero Trust and Micro-Segmentation for Critical Infrastructure
Leading Zero Trust Architecture and micro-segmentation programmes at a critical-infrastructure utility, alongside NAC, identity, endpoint privilege management and secure remote access.
- Zero Trust
- Micro-Segmentation
- NAC
- IAM
Building an MDR and MSSP Capability from the Ground Up
Created a managed detection and response framework and an MSSP capability for a global technology consulting group, including SOC workflows, service catalogues, threat intelligence and incident response.
- MDR
- SOC
- Incident Response
Security Governance and Resilience Across an APAC Payments Region
Seven years as regional security officer for a global payments company, owning security strategy, governance, incident response and disaster recovery across India, China, the Middle East and Southeast Asia.
- Security Governance
- PCI-DSS
- Incident Response
- DR / COOP
PCI-DSS Recertification for a Payment Gateway on AWS
Helped a payment gateway in Thailand restructure its cloud security controls to achieve PCI-DSS recertification for its AWS-based services.
- PCI-DSS
- Cloud Security
- AWS
Extending GRC to Cover AI Risk
Driving an AI governance and risk programme at a critical-infrastructure utility, aligned to NIST AI RMF, ISO/IEC 42001 and the EU AI Act.
- AI Governance
- NIST AI RMF
- ISO/IEC 42001