Hi, I’m Billy.

Security work that connects decisions to action.

My work sits between security expectations and the reality of how organisations make decisions, manage risk and get things done.

Useful security starts with a better question.

I prefer practical security over theoretical perfection. A control can be technically strong but difficult to use; a process can satisfy a requirement while creating unnecessary friction. Good security means understanding those trade-offs and finding an approach that works for the organisation and the people using it.

Metrics are easy to produce. Making them useful is harder.How I think about security

The perspective behind my work.

I’m CISM-certified, with Microsoft and AWS credentials across cybersecurity architecture, cloud security and security fundamentals. These credentials support my experience; they are not a substitute for it. Links point to issuer records or badge pages, while the Credly profile is the complete credential index.

Curiosity doesn’t stop at the office.

Cybersecurity is what I do professionally, but it isn’t the only thing I’m interested in.

Part portfolio, part notebook, part playground.

This website brings together my professional experience, practical security work, things I’m learning and projects I’m building. I don’t expect everything here to fit neatly into one category, and like most personal projects, it will keep changing.