I I work with organisations to translate regulations to controls, architecture and operational resilience. I’m a lawyer by training and a security practitioner. For more than eight years I’ve worked where regulation, technology and operations meet, in fintech, travel tech, HR tech and technology-innovation settings.

I currently lead the information security programme at a licensed electronic money institution in the Netherlands, in a CISO-equivalent role. Before that, I managed information security and technology contracts at the third largest travel management company, where I led various ICT third-party security projects and supported third-line audits.

My research sits close to my practice, where EU Laws stipulates obligations, governance and accountability functions on organisations who rely on infrastructure they don’t control. I’ve presented parts of this work at the University of Portsmouth and at Tilburg University’s TILTing Perspectives conference.

Teaching has been a constant. Over four years, the digital-skills programmes I facilitated with Google support reached more than 23,000 people, from early-career professionals and entrepreneurs to executives and policy audiences. I believe security improves when people understand it, not when they are asked to fear it.