Security posture, proven — not just documented.
15+ years turning threat landscapes into board-level risk narratives and investment-prioritised roadmaps — pairing governance rigour with modern, automation-led delivery across cloud, Zero Trust, identity, and detection & response.
Cybersecurity leader with 15+ years across enterprise and highly regulated environments — combining executive security strategy with hands-on architecture.
Experienced in standing up and running security programmes — owning enterprise risk, ISO 27001 / NIST CSF-aligned governance, regulatory compliance, and multi-vendor / MSSP oversight. Proven delivery across cloud (AWS, Azure, hybrid), Zero Trust, identity, and detection & response for government, healthcare, financial-services, and critical-infrastructure-adjacent clients across Asia-Pacific and India.
Security operating models and governance frameworks — policy, risk registers, control baselines and audit readiness — for organisations that need CISO-level leadership.
AI-powered security accelerators and multi-agent workflows that compress cloud assessments and posture hardening from months to days — enterprise assurance at lower cost.
Operating model, roadmap and budget — CISO-level direction that maps security investment to enterprise risk.
ISO 27001 · NIST CSF · King IV · POPIA — control baselines, risk registers and audit readiness.
AWS · Azure · hybrid · multi-cloud — secure-by-design landing zones, segmentation and encryption.
IAM · PAM · PIM · hybrid identity — federation, least privilege and privileged-access governance.
SIEM · SOAR · XDR/EDR · IR playbooks — telemetry, automation and measurable MTTD reduction.
Micro-segmentation · ZTNA · segmentation — cutting lateral movement across the estate.
IT/OT convergence and risk governance for critical-infrastructure-adjacent environments.
Multi-vendor operations, audits and SLAs — holding an ecosystem to a single standard.
LLM security · Bedrock · reusable security accelerators — assurance built with multi-agent AI.
Led security programme delivery and multi-vendor governance for IHiS in one of the most tightly regulated healthcare environments in APAC — policy, risk and compliance oversight across the estate.
Directed IT security operations for Singapore's financial and government programmes at NCS — ISMS audits, vendor governance and vulnerability management, with PCI DSS and AGO compliance.
Architected cloud-native CSPM for a hybrid AWS estate and rolled out EDR/XDR with policy automation and threat-intel integration across the endpoint fleet, with micro-segmentation cutting lateral-movement risk.
Ran end-to-end network security for a US-based global hospitality chain — Checkpoint, Cisco and Palo Alto firewall estates, VPNs, and incident and change management under PCI compliance.
Fractional CISO leadership, cloud & AI security architecture, and audit readiness for regulated organisations.