§ about
Twenty-plus years of security work.
Career background across architecture, infrastructure, security, and solutions, plus the skills, certifications, and thinking behind the practice.
Background
My background spans hands-on technical delivery through to executive advisory work. That includes enterprise, infrastructure, security, and solution architecture, along with security leadership, programme design, privacy, and governance across regulated organisations in Australia and New Zealand.
More recently, a growing part of the work has been around AI: helping organisations make sensible use of generative AI, assess vendor and data-handling risk, put governance and guardrails in place, and keep security, privacy, and delivery teams aligned.
2018 – present
Independent advisory
Running WHC, a boutique security and privacy practice. Work spans fractional CISO engagements, security programme design, privacy advisory, and governance - across financial services, healthcare, technology, and the public sector in AU and NZ.
2015 – 2018
Enterprise security leadership
Senior security roles at scale across APAC and London. Led teams, held a CISO title, and ran security programmes inside regulated industries. Developed deep experience in enterprise risk, compliance, and stakeholder engagement at the executive level.
2010 – 2015
Security consulting
Founded and ran a security consultancy across New Zealand. Built a practice covering GRC, cloud architecture, identity and access management, and security programme delivery - working across government, financial services, and utilities.
2001 – 2009
Technical foundations
Started as a web developer and co-founder, progressed through network engineering and enterprise, infrastructure, security, and solution architecture in professional services and higher education. Built a strong grounding in systems design, infrastructure, and how technology holds together under pressure.
More detail on LinkedIn and via references, including feedback from founders, CTOs, and engineering leaders on security, compliance, and pragmatic advisory work.