Executive Experience

Experience earned through accountability.
Applied where it matters.

My experience spans more than 30 years in technology and cyber security, including more than two decades in senior leadership and eight years holding concurrent CIO and CISO accountability in regulated investment management.

The examples below describe responsibilities I have held and results I have delivered. They underpin the judgement I bring to every Gratmore engagement.

SCHEDULE A CALL

EXECUTIVE EXPERIENCE

More than 30 years of technology and cyber security experience, with executive responsibility for strategy, global operations, governance, operational resilience and board assurance.

30+ Years

Technology and cyber security experience

8 Years

Concurrent CIO & CISO

Global Financial Services

Highly Regulated Environment

Board Accountability

Technology • Cyber • Governance

SELECTED CAREER EXAMPLES

These examples describe work in prior executive roles. They show the experience I bring to an assignment, rather than promising the same result in every organisation.

Governance under scrutiny

Context: Executive responsibility for technology, cyber security and operational resilience in a globally regulated investment manager.

Deliverable: Established its first integrated CIO and CISO leadership function. Designed governance aligned with ISO 27001, SOC 2, NIST, FCA SYSC and DORA, and led SOX 404, SOC 1 and SOC 2 Type I and Type II audit cycles.

Results: Eight consecutive SOC audits with no material findings; audit observations reduced by 40%. Strengthened control evidence and executive assurance reporting.

Relevance: When boards and investors need a clear account of control effectiveness and remediation.

Security and supplier oversight

Context: Executive cyber security leadership spanning governance, operational decisions and board accountability.

Deliverable: Created a unified technology and cyber security operating model, introduced centralised security monitoring, and implemented structured vulnerability management and penetration testing.

Results: Strategic technology suppliers rationalised from eight to three; cyber incident detection and response improved by approximately 50%. Improved board assurance through executive cyber reporting.

Relevance: When technical activity needs clear ownership, supplier challenge and executive oversight.

Technology through growth

Context: Technology leadership through organisational growth, with responsibility for operational maturity, resilience and governance.

Deliverable: Introduced executive operational reporting and service performance metrics. Improved incident, change and problem management, and formalised enterprise technology risk management.

Results: Strengthened enterprise technology governance and established the governance foundations for further cyber security transformation.

Relevance: When leadership needs evidence of service performance, delivery risk and the decisions requiring intervention.

EXPERIENCE APPLIED

Technology, cyber and governance decisions benefit from experience that has been tested under real executive accountability.

Every Gratmore engagement draws on my experience in technology and cyber security, including more than two decades in senior leadership across regulated environments, transformation, operational resilience and board accountability.

Whether the requirement is to Lead, Advise, Assess or Develop, the objective is the same: bring experienced judgement to the situation, strengthen decision-making and leave the organisation in a stronger position.

LET'S DISCUSS YOUR PRIORITIES

A confidential conversation around your technology, cyber security, or governance priorities, and where my experience can help.

Any further work is agreed with you in advance, including scope, deliverables, fees, and timing.

SCHEDULE A CALL

✓ No obligation
✓ Confidential discussion
✓ Focused on your priorities

Click to access the login or register cheese