Description

Board-level, highly technical, cyber security executive with three decades of experience and a deep portfolio of non-executive and advisory work. CEO of UK Cyber Defence (formed November 2025 from the merger of Hedgehog Security and UK

Cyber Defence), with a growing focus on governance and advisory work. Founder and creator of EmilyAI, the world's first fully autonomous AI SOC analyst and cyber defender.

Holds two non-executive director-style seats at CREST: the European Council (since 2022) and the pan-European

Advisory Board for Incident Response (since 2023), shaping strategy, standards and policy engagement with regulators

and government across Europe. Former trustee of The Dove Service (2015 to 2019) and member of Microsoft’s

European CISO Council (2006 to 2008). Highly experienced in ISO27001, ISO42001, PCI-DSS and RTS compliance.

Earlier career as CISO of Gala Coral Group, and a foundational decade at HM Government. Fellow of

the British Computer Society (FBCS), Chartered IT Professional (CITP), CISSP, OSCP, CREST CRT. SC Magazine

Information Security Person of the Year runner-up, 2009.

Industry field of expertise

Languages

English
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

UK Cyber Defence
Chief Executive Officer
January 2010 - Today (16 years and 6 months)
Cambridge, United Kingdom
Founded Hedgehog Security in 2010; built it to an internationally recognised cyber security firm serving Microsoft, Tesla, Virgin Atlantic, Tokio Millennium Re and others across technology, financial services, aviation, insurance and government. Led the November 2025 merger with UK Cyber Defence, integrating both businesses into the combined entity now trading as UK Cyber Defence. Board-level accountability for strategy, financial performance, regulatory compliance (ISO/IEC 27001, 9001, 14001, 22301, PCI-DSS, CREST) and people leadership; founded a veteran-to-cyber transition pathway.
Cybersecurity IT-Security CISO Cyber Defence artificial intelligence
European Council
Council Member
January 2022 - Today (4 years and 6 months)
Non-executive seat on CREST's European Council. Shape strategy, standards and codes of conduct for technical security testing and accreditation; represent European members into global governance; advise on emerging risk and regulatory developments.
Risk Management CISO IT-Security
CREST
Advisory Board for IR
January 2023 - Today (3 years and 6 months)
Non-executive seat on CREST's pan-European Advisory Board for Incident Response. Advise on strategic direction and accreditation frameworks for cyber security incident response / Incident Response services; provide oversight on policy and engagement with regulators, national CERTs and law enforcement. Help grow and develop with the pan-European incident response community.
CISO Cyber Defence Incident Response