I lead security and compliance advisory for fintech and digital-asset clients, alongside AI-security work. Engagements cover architecture reviews, risk assessments, information security management systems and audit delivery.

I define the scope of the work, coordinate penetration tests and audit preparation, and help teams prioritise remediation. This includes ongoing advisory as well as individual technical reviews.

I was responsible for custody and transaction security across banking, card and crypto products. I personally designed the Fireblocks controls, from approval policies and signing quorums to wallet separation and recovery.

The work covered who could approve a withdrawal, change a policy or access a co-signer; how to preserve the destination address between approval and signing; and how to recover access without bypassing the controls. I also handled API and webhook security, detection and incident response.

I led the PCI DSS 4.0 workstream through completion and worked on CCSS preparation.

Part of my work across the Crypterium / Choise group. I reviewed wallet and card products, APIs, integrations and smart contracts, and worked with product teams on threat modelling and remediation.

I helped establish the security function and worked across leadership, DevSecOps and architecture. My responsibilities included incident response, secure development practices and security reviews with engineering teams.

The technical work included cloud and application security, wallet and card infrastructure, code review, bug-bounty coordination and incident investigations.