I help regulated organisations adopt AI safely, securely and in line with the rules they operate under.

My background is more than ten years across systems, networks and enterprise security, supported by a GCHQ-approved MSc in Cyber Security from the University of York. That grounding matters, because AI governance done badly is usually a security and accountability problem wearing new language.

My work connects three things organisations tend to treat separately: AI governance and regulatory compliance, technical controls and security, and practical AI systems, agents and automation.

I work with ISO/IEC 42001, the NIST AI Risk Management Framework, the NIST Cybersecurity Framework, ISO 27001, GDPR, the EU AI Act, FCA requirements, SRA professional obligations and NHS information governance.

What I help organisations do

Assess AI governance maturity and risk · Develop responsible AI policies and control frameworks · Identify accountability, privacy and oversight gaps · Design human oversight and approval processes · Build AI risk registers, governance documentation and evidence trails · Review AI-generated content for regulatory, legal and reputational risk · Develop RAG systems, Microsoft Copilot agents and internal AI tools · Deliver practical AI governance and compliance training

Available for contract, interim and project-based work, remote across the UK.