Fractional CISO expertise for organizations that need strategic security leadership without a full-time executive. I assess your current posture, develop roadmaps, and guide implementation.
Navigate the security and compliance challenges of AI deployment. From LLM security to bias testing to regulatory compliance, I help you build AI systems responsibly.
Expert guidance on GDPR, CCPA, CPRA, and emerging surveillance regulations. I've spoken at the FTC and worked with regulators—I know how they think.
Build or mature your security program with proven frameworks. OWASP, NIST, ISO 27001—I've implemented them all and can tailor them to your organization.
"Ian's assessment work was invaluable. His expertise in identifying application vulnerabilities and implementing security controls significantly improved our security program's maturity."
Jerome Foster, MSISA
"Ian brings serious technical acumen combined with passion and problem-solving abilities developed over 30 years in software. He has strong potential for CISO or leadership roles."
Tom Lindeman
President & CEO, Shinobi USA, Inc.
Seattle Chapter Leader (Multiple Years)
Organized monthly meetings, brought industry speakers, promoted application security best practices.
Community Contributor
Advanced knowledge through CISSP program covering eight security domains.
Community Participant
Expertise in security governance, risk management, audit, and compliance through CISM and CISA programs.
Hacker Conference Participant
Active engagement with offensive security research and emerging threats.
Washington, DC
"Avoiding Catastrophe: An Introduction to OWASP Proactive Controls"
Seattle, WA
"Application Security & OWASP Frameworks"
Started as a software developer in the early days of the commercial internet. Built systems, wrote code, and learned how applications work in production—not just in theory. This technical foundation became invaluable when moving into security.
Founded Locked Networks to help organizations navigate emerging security challenges. The name came from a simple idea: security should be like a well-designed lock—reliable, understandable, and effective without being unnecessarily complex.
Pursued rigorous professional development through (ISC)², ISACA, and ISSA. Became OWASP Chapter Leader in Seattle. Spoke at the Federal Trade Commission on application security—gaining deep insight into how regulators think about security and compliance.
Now helping organizations navigate AI security, privacy compliance, and modern threat landscapes. Currently active at Puzzle (since 2022), dealing with modern threats every day. Not living off past experience—continuously learning and adapting.
Let's talk about your security challenges. In 15 minutes, we'll explore how I can help with AI governance, privacy compliance, pre-exit security, or fractional CISO services.
Opens in Cal.com - secure booking system
Flexible engagement models tailored to your stage and situation. From fractional CISO services to equity partnerships, let's discuss what works best for you.