About
OT/ICS cybersecurity engineer with a pragmatic, engineering-led approach to risk reduction in critical infrastructure.
I work in OT/ICS cybersecurity in rail and transport environments, focusing on practical ways to reduce operational cyber risk without disrupting the business of running a safe, reliable service. My work sits at the junction of engineering, operations, and security: improving visibility, shaping threat scenarios, strengthening governance, and making incident readiness usable for the people who respond under pressure.
Over time I've learned that the strongest security programmes in critical infrastructure are the ones that engineers and maintainers trust. That means controls that are realistic in constrained OT environments, monitoring that produces signal rather than noise, and governance that turns risk into funded, owned work.
With over 20 years in the transport industry, I've progressed from customer-facing roles through operations management to specialising in OT cybersecurity. This journey has given me a deep understanding of how railways actually operate, the constraints that engineering teams work within, and why security must align to operational reality rather than fight against it.
I also invest heavily in hands-on learning through a personal lab and continuous professional development, with a long-term goal of offering consultancy services in OT/ICS cyber resilience for transport and other safety-critical sectors.
Credentials & Professional Development
Professional Memberships
Active member of professional bodies that support ongoing development and contribution to the wider security and transport communities:
- Chartered Institute of Railway Operators (CIRO)
- ISC2
- ISACA
- Chartered Institute of Information Security (CIISec)
Key Skills
Recognition
Winner of 'CNI Team of the Year' and nominated for 'Emerging Talent of the Year' at the National Cyber Security Awards 2025, recognising leadership in cyber resilience, NIS compliance, and contribution to national transport security.
Meeting HM Queen Camilla at a transport industry reception.
This site reflects my personal professional work and interests. I do not speak on behalf of any employer or client. Examples are described at a high level and anonymised to protect operational security and confidentiality. I do not take on advisory work where it would create a conflict of interest with my employment.