About

I've spent the better part of 25 years building and scaling technology businesses, the last 15 of those in cybersecurity. My career has taken me from the UK to Australia to Singapore and back again, and the through-line across all of it has been the same: taking security organisations with strong technical foundations and building the operational engine (the go-to-market strategy, the delivery model, the commercial architecture) that turns potential into sustained growth.

The pattern has been consistent: find a security business with strong technical foundations and unrealised commercial potential, then build the operational engine that unlocks the growth. I've done that at Bugcrowd, where I led the advanced services organisation and shaped the offensive security strategy; at NCC Group, where I built the Asia-Pacific division from a small team into a regional operation spanning multiple countries; and at Slipstream Cyber, where I built the commercial and operational scaffolding that allowed the business to scale significantly.

I hold an MBA from Griffith University and am currently completing Oxford's AI & Business Transformation programme at Saïd Business School. I'm deeply interested in the intersection of artificial intelligence and cybersecurity: not the hype, but the genuine operational and strategic implications of what happens when AI reshapes how we attack and defend.

Meaning In the Signal is where I write about the things I think about most: security strategy and the gap between what organisations say about risk and what they actually do about it, the real impact of AI on how security businesses operate and compete, and the broader question of how to build things that matter. Practitioner's perspective, grounded in evidence, unafraid to state a position.

Connect on LinkedIn →