About

I've spent the better part of 30 years building and scaling technology businesses, the last 20 of those in cybersecurity. My career has taken me across the US, EMEA, and Asia-Pacific markets, and the focus has always been the same: taking security organisations with strong technical foundations and building the operational engine (the go-to-market strategy, the delivery model, the commercial architecture) that turns potential into sustained growth.

The pattern has been consistent: find a security business with strong technical foundations and unrealised commercial potential, then build the operational engine that unlocks the growth. I've done that at Bugcrowd, where I led the advanced services organisation and shaped the offensive security strategy; at NCC Group, where I built the Asia-Pacific division from a small team into a regional operation spanning multiple countries; and at Slipstream Cyber, where I built the commercial and operational scaffolding that allowed the business to scale significantly.

I hold an MBA from Griffith University and am currently completing Oxford's AI & Business Transformation programme at Saïd Business School. I'm deeply interested in the intersection of artificial intelligence and cybersecurity: not the hype, but the genuine operational and strategic implications of what happens when AI reshapes how we attack and defend.

Meaning In the Signal is where I write about the things I think about most: security strategy and the gap between what organisations say about risk and what they actually do about it, the real impact of AI on how security businesses operate and compete, and the broader question of how to build things that matter. Practitioner's perspective, grounded in evidence, unafraid to state a position.

Connect on LinkedIn →