Senior Technical Consultant
Paul Roach
Senior Technical Consultant with over 20 years in IT and information security, leading assessments and Cyber Essentials work.
Biography
Paul Roach is Senior Technical Consultant at Complete Cyber Security, with more than twenty years of experience across IT infrastructure and information security. He leads cyber security assessments and Cyber Essentials and Cyber Essentials Plus engagements, and is usually the person a client works with from initial gap analysis through to certification.
His background spans server and network architecture, information security governance, automation and project delivery — a combination that matters in assessment work. Identifying a control gap is straightforward; knowing what it will actually take to close it in a live SME environment, and what it will cost the business in disruption, requires having done the implementation. Paul's reports set out findings in order of risk, with the remediation effort stated plainly, so a board can decide what to fund and in what order.
He is a regular participant in the regional security community and co-organises DC151, the DEF CON group in Leeds, which brings together security practitioners across West Yorkshire for talks and technical sessions.
Professional experience
Senior Technical Consultant
Complete Cyber Security · Present
Leads cyber security assessments, risk reviews and Cyber Essentials / Cyber Essentials Plus certification projects for SME clients, and advises on business email compromise and payment-fraud controls.
IT and information security
20+ years across UK organisations
Server and network architecture, information security governance, automation and infrastructure project delivery — the practical foundation behind current assessment and remediation work.
Co-organiser
DC151 (DEF CON Group, Leeds)
Co-runs the Leeds DEF CON group, hosting talks and technical sessions for the West Yorkshire security community.
Areas of specialisation
- Cyber Essentials and Cyber Essentials Plus certification
- Cyber security assessments and risk reviews
- Information security governance and policy
- Business email compromise and payment-fraud prevention
- Security automation and infrastructure projects
- Translating technical findings into board-level decisions
Industry expertise
Sectors Paul works in most regularly, where confidentiality, uptime and regulatory expectations carry the greatest weight.
Speaking and community
- Co-organiser, DC151 — the DEF CON group for Leeds and West Yorkshire
