I'm a technology and information security leader with experience spanning technology strategy, operations, cybersecurity, digital transformation, AI governance and organisational resilience.
I've spent much of my career in environments where technology leadership means operating at two levels:
Setting direction with executives and the Board, while remaining close enough to the technology to understand how it is actually delivered.
This GitHub is where I document some of the frameworks, practical examples and lessons I've developed along the way.
I tend to come back to four questions:
- What business problem are we trying to solve?
- What is the simplest practical technology approach?
- What risk are we accepting or reducing?
- How will we know whether it worked?
I don't see technology leadership as a choice between being strategic or technical.
The role is to understand enough of the detail to make good decisions while keeping the focus on business outcomes, risk, people and delivery.
My Technology Leadership repository brings together practical case studies from across my experience.
Topics include:
- Governed AI adoption
- Cybersecurity maturity
- Multi-year digital transformation
- Business-led technology prioritisation
- IT/OT and production technology
- Secure environment delivery
The focus is less on the individual technologies and more on:
Context → Challenge → Approach → Outcome → Lessons
A practical approach to cybersecurity strategy, governance, risk and resilience.
Covers areas including ISO 27001, Essential Eight, NIST, SOC 2, security maturity, risk management and security architecture.
A practical approach to enabling AI adoption while managing privacy, security, data and organisational risk.
Built around a simple assessment model:
Use Case + Data + Risk + Platform
Perspectives on operating and improving a modern technology function.
Covers service management, resilience, vendor management, technology roadmaps, executive reporting and business-led prioritisation.
Practical automation examples across IT operations, Microsoft 365, security, infrastructure and reporting.
I'm not a full-time developer, but I believe technology leaders benefit from remaining technically curious and close enough to the technology to understand how things actually work.
There's even a small technology playground.
Because apparently no GitHub portfolio is complete without:
Hello, World!
Technology Strategy & Transformation
Technology roadmaps, investment prioritisation and organisational change.
Cybersecurity & Risk
Security strategy, ISO 27001, Essential Eight, risk, resilience and assurance.
AI Governance & Enablement
Governed AI adoption, use-case assessment, data protection and responsible experimentation.
IT Operations
Reliable, measurable technology services aligned with business priorities.
IT/OT
Technology supporting production environments, including availability, networking, segmentation and cybersecurity.
Data & Technology Governance
Creating appropriate structure around information, platforms, risk and technology decisions.
Microsoft 365 • Azure • PowerShell • Microsoft Graph • Cybersecurity • ISO 27001 • Essential Eight • SOC 2 • NIST • AI Governance • IT Operations • IT/OT • Automation • Data Governance
Technology changes quickly.
Good technology leadership is more consistent.
Understand the business. Make priorities visible. Manage risk. Keep things practical. Deliver outcomes.
And keep learning.
This GitHub is a working collection of technology leadership ideas, frameworks, practical examples and the occasional experiment.