I used to work for Visa Europe and was their representative on the PCI Security Standards Council, so I contributed to the development of a number of PCI standards including PCI DSS, PCI PA DSS and P2PE. I was also responsible for Visa's PCI compliance programmes in Europe - so I've a detailed knowledge of who needs to comply with PCI DSS and how they need to demonstrate that. Before that I was a security consultant, a QSA and I've worked with lots of large merchants in Europe.

After I left Visa, I've worked as a contractor and consultant. I'm currently helping a large airline with payment security and the legal and regulatory team at Open Banking balancing GDPR and PSD2. I hold professional certifications in information security and privacy and have an LLM in Information Rights Law.

In my spare time I write PCI training courses for Pluralsight.