John Rouffas

Chief Information Security Officer with more than 25 years' international experience leading cyber security strategy, operational resilience and technology risk across financial services, telecommunications, government and critical infrastructure. Experienced in building and transforming enterprise security functions spanning governance, security operations, architecture, engineering, identity, incident response and organisational resilience. Combines executive leadership with deep technical credibility gained through designing Security Operations Centres, leading cyber incident response, securing large-scale digital platforms and advising Boards on cyber risk and technology investment.

Known for developing pragmatic, business-aligned security strategies that strengthen resilience, reduce organisational risk and enable innovation. Equally comfortable leading executive discussions, supporting engineering teams or directing response during major cyber incidents. Recognised for building high-performing teams, mentoring future leaders and contributing to the broader cyber security profession through executive education, research and industry thought leadership.

Executive Consultant and Security Advisor - Global - Global

(2023-01)

Deliberate transition from full-time CISO leadership into executive advisory, strategic consulting and industry leadership — providing Board and CISO-level counsel while shaping the profession's response to AI governance, cloud security and resilience.

• Provide executive advisory covering cyber strategy, governance, technology risk and organisational resilience
• Serve as researcher, author and course reviewer for the SANS Institute, contributing to advanced cyber security education
• Contribute executive content and leadership programmes through CyberEdBoard.io, working directly with peer CISOs worldwide on emerging challenges — particularly AI governance and risk
• Design and facilitate executive workshops for CISOs and senior technology leaders
• Support organisations with cyber maturity assessments and security capability uplift

Chief Information Security Officer - Intelliflo (Invesco Digital Wealth) - London, United Kingdom

(2021-08 - 2023-03)

Executive accountability for enterprise cyber security across a global SaaS organisation operating under FCA and SEC regulatory oversight within highly regulated financial markets.

• Developed and executed global cyber security strategy aligned with business growth and technology transformation
• Managed enterprise cyber security investment exceeding $10 million
• Achieved ISO 27001 certification and SOC 2 Type II accreditation
• Improved cyber resilience, security operations and incident response capability across international operations
• Reported cyber risk, organisational resilience and security performance directly to Executive Leadership and the Board

Chief Information Security Officer - Bink Financial Solutions - London, United Kingdom

(2017-09 - 2021-01)

Established and led the enterprise cyber security function supporting an innovative AWS-based financial technology platform integrated with major international banking partners.

• Built and led a high-performing cyber security capability supporting rapid organisational growth
• Embedded secure software development, security architecture and operational security into technology delivery
• Improved cyber resilience through enhanced detection, monitoring and incident response
• Delivered organisation-wide security awareness and executive cyber exercise programmes

Associate Director – Security Intelligence & Operations Consulting - Protiviti - Atlanta, USA

(2014-01 - 2017-08)

Led strategic cyber security consulting engagements across Europe and North America supporting telecommunications providers, utilities, government agencies and Fortune 500 organisations.

• Designed and established more than twenty enterprise Security Operations Centres
• Led cyber security consulting engagements for several companies including Deutsche Bank, Deutsche Telekom and KPN
• Led PCI DSS engagements for several companies across USA and Europe
• Supported Southern Company in strengthening NERC CIP-aligned cyber security capability

Security Architect - ANZ Banking Group - Melbourne, Australia

(2010-12 - 2013-12)

Led enterprise security delivery supporting strategic technology programs within one of Australia's largest financial institutions.

Head of Security - Telstra - Melbourne, Australia

(2008-12 - 2010-12)

2IC to CISO, Led enterprise security strategy, architecture and operational security across Australia's largest telecommunications provider.

Managing Consultant - U.S. Government Agencies - New York, USA

(2001-01 - 2008-12)

Developed advanced security monitoring technologies supporting defence and intelligence environments; received a U.S. Government Certificate of Appreciation for contributions to national security.

Applied Science - Melbourne Polytechnic