Turning complex regulatory risk into competitive advantage for organisations that can't afford to fail. 13+ years building enterprise-grade GRC frameworks across banking, manufacturing and education.
Digital Security & GRC Professional
MPS Candidate — University of Auckland
13+
Years GRC Experience
100%
Audit Pass Rate
GRCISO 27001AI GovernanceBCP/DRAuckland, NZ
Auckland, New Zealand
40+
Regulatory audits led
85%
RTO reduction achieved
$500K
Annual downtime prevented
99%
CMDB accuracy (from 75%)
60%
Audit observations reduced YoY
Core Expertise
What I bring to your organisation.
🛡
Governance & Compliance
ISO 27001/42001, PCI DSS, NIST CSF, ITIL v3/v4. Sustained 100% satisfactory compliance rating across 40+ regulatory reviews at a major commercial bank.
⚠
Enterprise Risk Management
Built IT Risk Frameworks identifying 25+ enterprise risks. KRI monitoring prevented 12 critical incidents annually — saving $500K+ in downtime costs.
🔄
Business Continuity & DR
Architected BCP protecting $2B+ in assets. Reduced RTO from 5 hours to 45 minutes. 95% success rate across 60+ critical application DR tests.
🤖
AI Governance
ISO/IEC 42001 Lead Auditor — formal AI governance credentials. Integrating AI risk into GRC frameworks aligned with OECD & G7 AI Principles.
⚙
IT Service Management
Led ManageEngine ITSM for 9,500+ employees. Reduced ticket resolution by 35%, improved user satisfaction from 3.2 to 4.5/5.
☁
Cloud & Infrastructure Security
Azure Administrator, Oracle Cloud AI & Data Science Professional. Cloud governance with 99.7% uptime SLAs across multi-facility networks.
This website's own CMS — a lightweight PHP + JSON content management system with no database dependency. Manage blog posts, page content, and media.
PHPJavaScriptCMS
Latest Writing
Insights on security, governance & AI.
GRC
IT Governance for Small Organizations: Why It Matters More Than You Think
IT governance isn't just for large enterprises. Small organisations in NZ face the same risks — just with fewer people to absorb the impact. Here's what matters, what to use, and what to avoid.
Part 3 of 3: Scaling to Maturity — How to Make Data Governance Self-Sustaining
You have policies, stewards, and quality metrics. Now the real question: how do you make governance self-sustaining? This final part covers automation, AI readiness, KPIs, and what mature looks like i
Part 2 of 3: Operationalising Data Governance — From Paper Policies to Daily Practice
You've mapped your data and assigned owners. Now comes the harder part — making governance stick. Here's how to build policies, data quality controls, and stewardship workflows that actually get used.
Part 1 of 3: Data Governance from Scratch — How to Build the Foundation Your Organisation Actually Needs
Most organisations know they should govern their data — few know where to start. Here's a practical, NZ-focused guide to building your data governance foundation from scratch.
Based in Auckland, NZ with full work rights. Open to full-time permanent roles, contract engagements, and collaborative project work globally. Also available for remote engagements.
Completing a Master of Professional Studies in Digital Security at the University of Auckland (expected June 2026).
