My professional focus sits at the intersection of technology, cybersecurity, governance, regulation and operations — applied within a regulated financial-market environment.
The domains below describe capability areas rather than a task list: where I can set direction, design and review controls, work through regulatory and audit expectations, and hold operational practice to them.
For roles, scope and the work these capabilities were applied to, see Experience.
Financial-market technology is the domain context in which these capabilities intersect.
Establishing and maintaining security posture through governance, defined controls and the operational routines that keep them effective.
Governance, risk and compliance structures that make technology risk visible, owned and treated rather than recorded.
Interpreting technology-related regulatory expectations and translating them into controls, evidence and reviewable practice.
The domain context in which the other capability areas intersect: market-facing technology operated to regulatory and operational timelines.
Oversight of controlled, repeatable operations — with clear ownership, monitoring and change discipline across the technology estate.
Treating continuity and recovery as tested capabilities, prioritised by risk and impact rather than documented and assumed.