About me

I offer my Services under the name White Hat Consulting in Wellington, New Zealand and remotely.

I also do talks and panels.

Some significant achievements

• Raise InfoSec maturity of two software companies having limited to no InfoSec practice; Establish policies and standards; Work on a culture shift from staff to C-level; Significant progress in meeting clients and regulator's privacy and IS requirements (e.g. GDPR, C&A);

• Successful development of a global framework; Design, code, and deliver an internal solution to manage access to Unstructured Data for an international bank, allowing significant risk reduction and compliance with internal audit as well as government requirements;

• Technical leadership for the technological merger of two government departments with 16 sites across the country: Desktop, servers, accounts, mailboxes, files, etc., delivering this multi-million dollar project on time and within budget;

• Design and successfully deliver a fully redundant IT environment in Canada from the ground up to support virtual desktop hosting (hybrid cloud) in time and budget. Addition of a second data centre in Bermuda for business continuity and better performances locally;

• Global architecture re-conception and upgrade for an international law firm (based in seven countries worldwide), without any loss of data or functionality, resulting in significant improvements in performance and availability;

• Design of the global architecture and implementation of an identity management solution integrating many legacy systems, lowering the management time/errors and increasing data quality of 25,000 accounts for Switzerland's second-largest University.Top human skills

Working-with-people skills

Leadership - Leading by example, excellent team player, good listener, open-minded, pragmatic, SAFe/Agile practitioner, mentor, trainer, resource and conflict management;

Business - Stakeholder management, training and awareness, negotiation, business analysis, planning and delivery, SLA/OLA, KPI, suppliers/providers management;

Collaboration - Engagement with senior stakeholders (C-level), presentations (various levels, >100 attendees), meeting chair, tech lead, documentation (technical/end users).

Doing-stuff-for-people skills

Governance, Risk and Compliance (GRC) - Information security governance, risk management, business continuity planning, compliance/regulatory frameworks (NZ Privacy Act, PSR-NZISM/New Zealand, GDPR/EU, MAS/Singapore, HKMA/Hong Kong, ISO27k, PCI-DSS, NIST, OWASP...);

Security and Privacy - Security solution design, security/privacy reviews, platform/application hardening, application development security, network and cloud security, Identify and Access Management (IAM), DLP, cryptography, incident response;

And more - Enterprise/Solution/Infrastructure/Security architecture, cloud integration, solution design, scripting and coding, machine learning, storage platforms, HA and redundancy, networks, large multi-site environments, virtualisation...

Certifications

Security, privacy, technology, project management…

• CISSP - (ISC)2 Certified Information Systems Security Professional

• CISM - ISACA Certified Information Security Manager (highest score in Oceania)

• CRISC - ISACA Certified Risk and Information Systems Control (scored in the top 5%)

• PCIP - PCI Security Standards Council - PCI Professional

• AWS Certified Solutions Architect - Associate

• Certified Scaled Agile Framework (SAFe) 5 Practitioner

• Machine Learning at Stanford University (online)

• ITIL, Microsoft, Cisco, VMWare, Compellent, Novell...