immaginare Get in touch →

CLOUD & INFORMATION SECURITY CONSULTING

Don't just imagine your security posture.

Thirty years in IT, twenty-five in information security. I have a track record of helping organisations solve difficult cloud, architecture and security problems, with particular depth in AWS, DevSecOps and production AI/LLM security.

One senior consultant. Direct access. Independent answers.

30years in IT
25years in security
10+security and cloud certifications held
5languages spoken

WHAT CLIENTS & COLLEAGUES SAY

Recommendations.

Nine recommendations spanning twenty years, pulled from LinkedIn and kept up by hand: LinkedIn's terms don't permit automated scraping, even of your own public profile.

Read the recommendations →

Loading recommendations…

ABOUT

Senior expertise. Direct access.

I'm Ove.

Over three decades I've worked in IT and Security at Cisco, NatWest, JP Morgan, 10X Banking, Santander, Schlumberger and many others, and I now am/run "Immaginare" directly. I have no commercial partners to "influence" my work. And I have no products to sell except for my own expertise.

Recently I was security architect for two of Cisco's production AI/LLM products: AI Defense, including controls around prompts, PII and sensitive data, and the Webex Contact Center transcription and sentiment-analysis pipeline.

For much of the last decade my focus has been Cloud Security and DevSecOps: putting security into architecture, infrastructure and development pipelines

Immaginare is deliberately small. The person you speak to is the person who does the work. There is no account manager, no hand-off to a junior consultant and no large consultancy team to support. No cost markups or surprises.

At a glance

  • AWS-first cloud security, with good Azure, Entra and GCP experience
  • Security and risk, backed by CISSP, CISM, CISA and ISO 27001 Lead Auditor credentials, plus ample audit/risk assessment experience.
  • Hands-on architecture, not just governance: Terraform, Kubernetes, IAM, networking and CI/CD
  • Built businesses as well as advised them, including co-founding an early French ISP (Imaginet) later sold to COLT
  • Cisco M&A security and IT integration work, including Pirelli Optics and Tandberg
  • View LinkedIn profile →

SERVICES

Where I can help.

Here are three sample focused engagements: an AWS Security Review, an AWS Security Architecture Review, and private or air-gapped AI installation.

Cloud security architecture

Design and review of secure cloud architectures, with the deepest experience in AWS, most native AWS security services, worked with directly.

Got 30 AWS accounts that are a mess? I have worked with that.

Solid Azure experience and working GCP knowledge, used to multi-cloud environments.

AWSAzureGCPTerraformKubernetes

Risk assessment & audit

Practical, evidence-based risk assessments and audits - not a tick-box exercise. CISA-certified and an ISO 27001:2013 Lead Auditor, with implementer credentials in ISO 22301 and PCI-DSS for when the standard itself needs building, not just checking.

ISO 27001 / 27002ISO 22301PCI-DSSRisk assessment

M&A integration security

Identifying and mitigating the security risk that comes with acquisitions - from due diligence through to integrating an acquired company's systems and controls into the parent. Hands-on with a number of Cisco's acquisitions, including Pirelli Optics and Tandberg.

Due diligenceIntegration riskSecurity architecture

DevSecOps & AI/LLM security

Building security into the development pipeline itself - build tooling, CI/CD, infrastructure as code - plus recent hands-on architecture work securing production LLM systems: prompt-layer guardrails, PII/DLP filtering, and sentiment-analysis pipelines.

CI/CDTerraformLLM guardrailsDLP

TRACK RECORD

Large corporations. Small ones. Some very, very small ones.

I've worked inside global technology companies, banks, investment firms, energy businesses and start-ups. That range matters: security that works for a global bank isn't necessarily the right answer for a twenty-person technology company.

NatWest Bank
KX.com
JP Morgan Chase
Cisco
10X Banking
Santander Bank
Midland HR
Subsea 7
GAM Investments
Dana Petroleum

Acquisition integration work has included several of Cisco's M&A deals — among them Pirelli Optics and Tandberg — identifying and closing the security gaps that come with folding one company's infrastructure into another's.

CREDENTIALS

Certifications on file.

CISSPCertified Information Systems Security Professional
CISMCertified Information Security Manager
CISACertified Information Systems Auditor
AWS · SAAAWS Certified Solutions Architect
AWS · SECAWS Certified Security – Specialty
ISO 27001Lead Auditor, 2013 edition
ISO 22301Lead Implementer
PCI-DSSImplementer & Maintainer
PRINCE2Project management
CCNA ×4R&S, Cyber Ops, Security, Wireless

LANGUAGES

Need international engagements?

English

Fluent.

Native Norwegian, also Swedish & Danish

Grew up with all three — comfortable working in any of them.

French

Near fluent. Six years living and working in Paris made sure of that.

German

Near fluent. Learned at Hoechst AG and at university in Frankfurt.

Italian

Near fluent, studied at Eurocentro in Florence and later worked in Lugano.

GET IN TOUCH

Have a security problem that needs senior technical input?

Tell me what's keeping you up at night. I'm happy to have an initial conversation before either of us commits to anything.

HOME BASES Meldreth, SG8 and Edinburgh