Consulting & sparring
Independent perspective for leaders navigating security management, privacy, business continuity, risk and regulatory expectations.
Professional life
Safer digital journeys begin with clear decisions.
I help leaders turn cybersecurity, quality, privacy and resilience from a maze of requirements into a practical system of trust.
My professional mission
Helping people be safe in a digital world.
Cybersecurity can feel like a storm of standards, threats and technologies. My role is to help organisations see the whole landscape, understand what matters most and take the next sensible step.
I bring more than 20 years of experience across consulting, auditing, team leadership, managed services and executive quality. As Chief Quality Officer and internal CISO at Northwave Cybersecurity, I am responsible for the integrated management of quality, security, privacy, continuity, risk and compliance. Alongside that, I have served as CISO for organisations across six sectors—from energy grids to insurers to manufacturers.
Good governance is not paperwork. It is the quiet system that helps people keep their promises—even under pressure.
How I can help
From complexity to capability.
My work sits where governance, people and operations meet.
Training & speaking
Clear, practical learning experiences on ISO standards, auditing, cyber resilience, AI governance and digital trust.
Quality leadership
Building integrated management systems that support consistent delivery, real improvement and calm under audit pressure.
CISO in the field
Security leadership across six sectors.
Every sector keeps different promises. I have had the privilege of guarding them in very different worlds.
Basler AG
CISO · 2022 – present
Scildon
CISO · 2021 – 2024
Royal Cosun
CISO · 2021 – 2023
Alliander
CISO · 2019 – 2021
Municipality of Apeldoorn
CISO · 2018 – 2019
Fontys · Rabobank
CISO 2016 · Manager Global SOC 2013 – 2014
Areas of expertise
Broad view, practical focus.
Information security management
ISO 27001 · 27701 · 22301
SOC 2 & assurance
Cyber resilience & continuity
Quality management
Privacy & digital trust
Risk-based prioritisation
EU regulatory readiness — NIS2 · DORA · CRA
AI governance
OT security (IEC 62443)
Professional credentials
Experience backed by recognised practice.
Over 40 certifications spanning information security, audit, risk, privacy and continuity—because credibility should be earned twice: in the classroom and in the field. As a PECB Certified Gold Trainer and BSI trainer, I also help others earn theirs.
CISSPCISACISMCRISCCDPSEMBCIISO 27001 MasterPECB Gold TrainerIEC 62443 Senior Lead ImplementerSOC 2 Senior Lead AnalystFAIRPRINCE2 Practitioner
Work together
Need clarity for the next stage of your digital journey?
Let’s explore what safer, simpler and more resilient could look like for your organisation or learning programme.