Cybersecurity architect specializing in post-quantum cryptography, cryptographic agility, and quantum risk in financial infrastructure.

With over twenty years of experience in cybersecurity and security architecture in large, highly regulated environments, I focus on building resilient security programmes that stand up to real-world pressure and regulatory scrutiny. My work spans security architecture, governance, risk and controls, and cloud security—bridging deep technical detail with clear communication for executives, boards, and cross-functional teams.

My current work focuses on cryptographic agility, post-quantum cryptography, and the long-term impact of quantum computing on cybersecurity and financial infrastructure. I write and speak on controls assurance, security measurement, and emerging technology risk, with an emphasis on what works in practice rather than what simply looks good on a slide.

Read the Latest Insights

MY SKILLS

Quantum-Led Cybersecurity

My work sits at the intersection of cryptography, cybersecurity, and risk, with a focus on how quantum computing will reshape security, trust, and resilience in global financial systems. Much of my current work focuses on cryptographic agility and post-quantum readiness, helping organizations prepare for the long-term impact of quantum computing on cybersecurity and digital trust. The capabilities below reflect how I approach cybersecurity today: forward-looking, measurable, and built to operate at scale in complex, regulated environments.

CRYPTOGRAPHY, QUANTUM RISK & CRYPTO-AGILITY

Raising the Bar

Protect systems and data through strong cryptographic architecture
Develop firm-wide strategies for cryptographic agility and post-quantum readiness
Identify and remediate cryptographic and cyber vulnerabilities across the enterprise
Advise executives and boards on long-term cryptographic and quantum risk
Support transition planning toward quantum-safe security

CYBER RESILIENCE & OPERATIONAL CONTINUITY

Above and Beyond

Protect IT systems, critical infrastructure, and core business processes
Safeguard the availability, integrity, and confidentiality of enterprise systems and data
Maintain the firm’s ability to operate and deliver outcomes during adverse events
Design resilience into systems rather than reacting to failures

CYBER RISK & RISK QUANTIFICATION

A Measurable Discipline

Assess cyber risk across the enterprise
Quantify risk to support executive and board-level decisions
Prioritise and drive remediation of material risks
Translate technical risk into business impact and financial exposure

FOUNDATIONS

Scientific and leadership training that shaped my approach

My career began in physics and scientific research, focusing on measurement, uncertainty, and complex systems. Over time, this evolved into work in cryptography, cybersecurity, and enterprise risk in large financial institutions. The combination of scientific training, cryptography, and security architecture gives me a unique perspective on long-term cryptographic risk and the impact of quantum computing on global financial systems.

NEW YORK UNIVERSITY

Graduate work in high-energy physics, both theoretical and experimental, including research at Brookhaven National Laboratory and Fermilab. This work formed the analytical foundation for my later work in cryptography, risk modelling, and complex systems.

LAFAYETTE COLLEGE

Research in nuclear gamma-ray spectroscopy at Brookhaven National Laboratory and Los Alamos, supported by the U.S. Department of Defense and Department of Energy. This work developed a strong foundation in measurement, uncertainty, and signal analysis—skills that later translated directly into risk measurement, cryptography, and cybersecurity.

HARVARD BUSINESS SCHOOL

Executive education in negotiation and consensus building, informing my approach to executive communication, governance, and decision-making in large, complex organizations.

Q-Day Is Moving Left: Why 2035 May Be a Dangerous Assumption

We are no longer debating if quantum advantage is possible—we are now observing the first hints of it and where it begins to matter. Why This Pulls Q-Day Forward There’s a critical misunderstanding in how many organizations think about Q-Day. They treat it as a fixed point in time—a moment when a machine suddenly becomes powerful enough to break RSA or ECC. In reality, Q-Day is the outcome of multiple accelerating curves: Qubit stability and error correction

2 days ago3 min read

Provisional Trust: Crypto-Agility in an Age of Quantum Uncertainty

For decades, we operated under relatively stable assumptions. RSA and ECC were “good enough,” and the threat horizon for breaking them required either massive computational breakthroughs or exotic nation-state resources. Quantum computing changes that equation — not because it has already broken public-key cryptography at scale, but because it introduces structural uncertainty. Shor’s algorithm permanently altered our threat model for RSA and elliptic curve systems. PQC was b

Feb 252 min read