About

CISO leadership across the full maturity curve.

I have built security capability after a divestment, transformed an inherited function and worked inside large federated and enterprise environments. That range has made me wary of one-size-fits-all security. The right answer depends on the business, the operating model and the risk it is prepared to carry.

My career has progressed from network engineering and threat analysis into group assurance, security transformation and CISO accountability.

LinkedIn Contact

I am a CISO with more than ten years across PE-backed, multi-entity and enterprise environments.

My current remit spans strategy, executive reporting, cloud and engineering, identity, resilience, customer and supplier assurance, data security, AI governance and 24/7 security operations.

I have led direct teams of up to five and broader delivery through engineering teams, technology owners, consultancies and specialist security providers. I stay close enough to the technical detail to challenge assumptions, while building ownership that does not depend on the CISO for every answer.

Lloyd’s List Intelligence

CISO

Jul 2023 – present

Global digital data platform | PE-backed

Built the first dedicated security function following divestment, alongside cyber separation, Day-1 assurance and 24/7 security operations. Established executive and private-equity governance, assurance, resilience, supplier oversight and AI governance. Reduced critical vulnerability exposure by 80% through risk-based prioritisation, engineering ownership and disciplined remediation.

Hyde Group

Group IT Security Manager

Jun 2021 – Jul 2023

Five entities | 1,200+ users | Seven-figure security budget | Team up to five

Inherited a challenging brownfield environment and led its stabilisation and transformation, rebuilding governance, detection and response, and Board reporting. Delivered ISO 27001 readiness and Cyber Essentials Plus. Reduced annual security run-rate by approximately £200k through supplier renegotiation, tooling rationalisation and better use of existing capability.

Associated British Foods

Group Security Assurance Lead

Oct 2019 – Jun 2021

60+ businesses | Approximately 30,000 assets

Supported the Group CISO across a federated listed organisation spanning retail, food, manufacturing and operational environments. Led assurance, audit coordination, executive reporting, supplier assessments and group security-tool governance, including work across operating-company environments such as Primark and British Sugar.

Thomas Cook Group

Senior Vulnerability and Threat Analyst

Nov 2018 – Sep 2019

International travel and digital commerce

Led vulnerability and threat processes across international divisions, strengthened executive remediation reporting, and supported PCI DSS and GDPR readiness alongside external assurance activity.

RNIB

Network engineering and security operations

Jan 2016 – Nov 2018

Infrastructure, access and assurance

Built practical foundations across network engineering, segmentation, firewalls, secure mobility, access controls, vulnerability management and ISO 27001-aligned assurance.

Formal Board papers and regular presentations

Direct one-to-one engagement with a Board Chairman

Executive, investor and portfolio leadership governance

Incident, resilience and cyber-maturity exercises with senior leadership

Board reporting should make the decision clearer, not simply make the security data prettier. I focus attention on a small number of material issues, the choices available, accountable owners and what happens next.

Preserve what works

I do not change a team, supplier or control just to show movement. First understand what is already protecting the business and why it exists.

Start with the business problem

What can the business not afford to lose? Start there, then work backwards into risk, controls, recovery and ownership.

Calm before escalation

In an incident, verify first. Escalate with facts, options and ownership rather than fear.

Security is often ‘maybe, if’

Where the business case is sound, understand the risk, put sensible controls around it and keep the decision visible rather than defaulting to no.

Infrastructure and control

Network engineering, segmentation, access controls and cloud guardrails.

Threat and assurance

Vulnerability management, threat analysis, supplier and OT assurance.

Modern operating capability

Identity, recovery, managed security services and secure AI adoption.

Regulatory and assurance experience: Led and supported readiness, assurance and control improvement across ISO 27001, Cyber Essentials Plus, PCI DSS, GDPR, NIST CSF and SOC 2, alongside NIS2 readiness activity.

Top 100 CISO, Computing 2024IT Leaders 100, 2025Infosecurity EuropeCISO 360Visions CISO Summit

Leadership, advisory and speaking conversations

Focused on measurable outcomes, resilient operating models and sustainable change.

Contact Mantas Speaking profile