Nick Hall

Leads security strategy, governance and engineering initiatives across secure AI adoption, compliance, DevSecOps, vulnerability management and cloud-native security.

• Key in introducing artificial intelligence securely into the enterprise environment, including DevOps workflows.
• Led ISO 27001, ISO 27701 and SOC 2 Type II security initiatives, supporting certification and reporting outcomes with zero critical findings.
• Built vulnerability prioritisation capability using Trivy, EPSS and KEV intelligence to reduce critical vulnerability response time from 9 days to under 24 hours.
• Embedded DevSecOps controls into CI/CD and Kubernetes environments across development, testing and production.
• Developed executive-level security reporting dashboards and shift-left security practices across the SDLC.

Led security architecture and advisory work for enterprise clients across OT/IT, SD-WAN, cloud migration and compliance-led environments.

• Designed industrial firewall and OT/IT segmentation architectures using Purdue Model security principles.
• Architected SD-WAN security frameworks for multinational environments with standardised security policies.
• Developed secure cloud migration reference architectures using compliance controls, CSPM and IAM frameworks.
• Built security control matrices bridging IT and OT environments.
• Led security workshops with senior stakeholders, translating architecture decisions into business value and risk reduction.

Led senior security engineering delivery for enterprise MSSP clients across financial, healthcare and manufacturing sectors.

• Led technical teams of 5+ engineers, improving delivery standards, mentoring capability and team morale.
• Managed security operations across 100+ network security devices including firewalls, WAFs, proxies and IPS platforms.
• Oversaw enterprise PKI infrastructure with 99.999% availability.
• Led disaster recovery testing for mission-critical environments, achieving 100% recovery success and reducing RTO/RPO by 60%.
• Supported high-severity incident response and remediation across enterprise client environments.

Managed EMEA network infrastructure and enterprise networking projects supporting the transition into security engineering leadership.

• Supported 12+ European office locations as a primary technical networking resource.
• Led routing, switching and infrastructure refresh work across international environments.
• Delivered core Cisco Catalyst chassis switch refresh at the European head office with minimal downtime.
• Managed data centre, WAN optimisation and telephony infrastructure.
• Built the enterprise infrastructure foundation for later security engineering and architecture roles.