| Our People

Senior-led: the person you meet does the work.

| The Wider Team

Matthew leads every engagement and draws on a trusted bench of specialist practitioners as programs require. In our line of work we keep our people off the public internet — team profiles are shared on engagement.

| Founder Experience

Financial Services

• Security architect for a new high security, low latency foreign exchange trading platform for a major Australian bank — hosted in the UK and US in a bespoke private cloud — which has traded over $40B to date.
• Year-long secondment to a major bank's security governance team, uplifting security governance practices across the bank and contributing to an improved audit rating and substantial release of frozen capital.
• Comprehensive assessment of internet banking processes and technology of two mid-tier banks for submission to APRA, covering web application security, infrastructure security and supporting policy and procedures.
• Security acceptance testing of a major release of Australia's most well known internet banking system, and of a $110M web-based telling system replacement for a top-tier bank.
• Trusted advisor on an internet banking replacement project for a top-tier bank — risk assessment, security requirements and three phases of web application security assessment.
• Negotiated contractuals between the major banks and PEXA for the national e-conveyancing solution.

Enterprise & Industry

• Led the "Zero Trust and Fail Safe Operational Model" stream of a $15M security program at Australia's most profitable non-bank publicly listed company in the oil & gas industry, delivering microsegmentation and zero trust network access implementations.
• Developed the enterprise security architecture for one of Australia's largest retailers, driving a DevSecOps transformation and deploying cloud security posture and attack surface management technologies.
• Enterprise Security Architect and most senior security person at a web-scale SaaS vendor with 1000+ enterprise clients and $1.7B market cap — developing the enterprise security strategy and standing up the Product Security Incident Response Team (PSIRT).
• Developed Information Security Management Systems aligned with NIST CSF, ISF Standard of Good Practice, ISO 27k and PCI-DSS for organisations including Australia's leading car manufacturer.
• Assisted numerous organisations to gain and maintain PCI-DSS compliance, including the first service provider to achieve Level 1 PCI-DSS compliance in Australia.
• Built a penetration testing and application security practice at a Big 4 firm, selling, delivering and quality-assuring significant engagements for Australian banks.

Qualifications

• Certified Information Systems Security Professional (CISSP)
• One of a handful of Forrester Certified Zero Trust Strategists in the world
• Bachelor of Science (Security), Edith Cowan University — at issue in 1997, one of five people in the world with a bachelors in security management

Professional Associations

• Former Branch Executive of the Melbourne Branch of the Australian Information Security Association
• AISA Professional member
• Information Security Forum participant
• Open Web Application Security Project participant

Other Honours

• Author of the Amazon Kindle ebook Information Security Operations, one of only two written works worldwide on security operations structure and operations.
• Regular blogger for the CSO website and published in Australian Security Magazine.
• Prominently featured in a half page article in the Age newspaper.