An anonymous security professional seen from behind, overlooking a misty industrial landscape beside a glass pavilion

Capabilities · Security + AI

Domain depth.
Builder instinct.

A rare combination — enterprise cybersecurity, financial-crime and blockchain, agentic AI engineering, and thirteen years of UK policing leadership.

Explore capabilities

CISSP · CISM · ISO 27001 Lead Auditor · Open FAIR

Four security credentials underpinning applied practice across TPRM, CRQ, GRC and enterprise security architecture. Plus an MA Strategic Studies (Distinction).

View selected work

Capability index

Built across the boundary.

Most solutions architects know the domain. Fewer build the systems. Fewer still bring a decade of operational leadership from outside the industry. These capabilities connect enterprise decision-making with practical implementation.

Cybersecurity

Enterprise security depth spanning risk, architecture, governance and executive engagement.

CISSP: ISC2, all eight domains
CISM: ISACA — information security management
ISO 27001 Lead Auditor: APMG International, full auditor level
Open FAIR: FAIR Institute — Cyber Risk Quantification
Third-Party Risk Management: Platform sales and domain expertise
Continuous Threat Exposure Management: CTEM strategy and evaluation
GRC frameworks: ISO 27001, NIST, SOC 2, CIS
Security architecture: Enterprise threat modelling
Vendor risk assessment: Questionnaires, SIG and CAIQ
CISO engagement: Executive-level technical selling

Financial crime & blockchain

Chainalysis-era vertical depth. Blockchain investigation and financial-crime programmes for regulators, financial services and law enforcement.

Blockchain investigation: Chainalysis Reactor certified
KYT — Know Your Transaction: Transaction monitoring at scale
Cryptocurrency fundamentals: Assets, typologies, risk models
Fraud prevention: Enterprise programme design
Regulator engagement: FS and public-sector buyers

AI & agentic systems

Hands-on systems engineering for agents that can use tools, context and repeatable workflows.

Claude Code & Anthropic SDK: Daily practitioner
MCP server development: HTTP MCP, tool authoring and manifests
Multi-agent orchestration: Parallel agents and task routing
Agentic workflow design: Hooks, skills and scheduled routines
Personal AI architecture: Full custom multi-agent system (PAI)
Whisper pipelines: Real-time call intelligence with pyannote diarisation
Telegram bot integration: AI-agent communications bridge
Workspace automation: Google Drive, Calendar, Gmail via MCP

Sales engineering

The complete enterprise pre-sales motion, from qualification through technical proof and executive value.

Technical discovery: MEDDPICC and qualification frameworks
Demo delivery: Platform demos and tailored narratives
Proof of Value: Design, execution and success criteria
RFP responses: Enterprise security evaluation frameworks
Competitive positioning: TPRM bake-offs vs Black Kite, SecurityScorecard and UpGuard
Business case development: ROI models and board-ready risk narratives
Champion development: GRC, Risk, Procurement and CISO
Deal qualification: Scoring frameworks and POV gating

Leadership & public sector

Thirteen years UK policing before enterprise cyber. Real crisis command, real GDPR practice, real cross-organisational governance.

Chief Inspector, Greater Manchester Police: Emergency response, investigation and change programmes
Major Incident Commander: JESIP-qualified
Cabinet Office secondment: JESIP Joint Organisational Learning — ministerial-level reporting
NPCC national staff officer: GDPR, FOI and data-protection across 43 UK forces
ICO / Home Office briefing: National working-group chair
National Bravery Award 2016: HMG civilian award

Technical

Working knowledge across the stack — enough to build, deploy and integrate the systems above.

TypeScript / JavaScript: Node.js, Astro, API routes
Python: Automation scripts and API clients
PowerShell: Windows automation and scripting
REST APIs: Integration and webhook design
Git & GitHub: Version control and CI/CD
Vercel & Cloudflare: Deployment and edge functions
Structured data: JSON, API design and MCP schemas
Linux / WSL: Ubuntu, systemd and process management

Speaking & thought leadership

Where the work has surfaced.

Gartner: Conference speaker
FAIR Institute: Cyber Risk Quantification speaker
Cabinet Office: Ministerial-level reporting (JESIP)
UK national policing: Evidence-Based Policing presentation, force-policy authoring

Education

University of Reading.

MA Strategic Studies: University of Reading — Distinction
BA War, Peace and International Relations: University of Reading — First Class Honours

Domain depth.Builder instinct.