Founding member

Paul Healy

The CIO who ran ICT at $8B scale — now sized for everyone else.
ISO 27001 LA ISO 27701 vCIO / vCISO ISMS implementation Microsoft 365 security IRAP Cloud migration M&A integration

Paul is a Chief Information Officer with more than fifteen years leading information technology and security strategy inside a high-growth, ASX-listed business — and a qualified ISO/IEC 27001 Lead Auditor who now puts that experience to work for organisations a fraction of the size.

For fifteen years he led global ICT at one of the world’s ten largest travel management companies — an ASX-listed business. He joined as the ANZ IT manager and left as Global CIO, steering its computing, communications and security capabilities through headcount growth from 200 to over 3,000, transaction value from $200M to $8B, more than twenty acquisitions, and cloud migrations across Microsoft 365, Azure and AWS. Under his watch the company became the first Australian travel management company to achieve ISO 27001 certification and completed the IRAP assessments required to serve the Australian Government and Parliament.

In 2023 he founded his own consultancy to give smaller businesses the cybersecurity capability he’d spent his career building for a large one — enterprise-grade, but sized and priced to fit. Engagements span ISO 27001 certification readiness and ISMS implementation, virtual CIO/CISO retainers, security, risk and privacy assessments, and contract certification auditing for Conformance Assessment Bodies across ISO 27001, ISO 27701, ISO 20000 and the Australian ISM. He joined InfoSec Collective as a founding member in 2026.

Where Paul creates value
Enterprise capability, SME budgets
Bringing the security and compliance posture of a listed enterprise to small and medium businesses — built to be affordable, not to be a scaled-down compromise.
Certification readiness that holds up
A Lead Auditor who also implements the management system end to end, so the certificate reflects controls that actually run — not a binder assembled for audit week.
Scale and transformation behind the advice
Fifteen years scaling one ASX-listed company through cloud migration, M&A and rapid growth — so the guidance is grounded in delivery under real pressure.
The Microsoft security stack, hands-on
End-to-end platforms across Microsoft 365, Intune, Defender, Purview, SharePoint and Entra — designed, deployed and operated, not just specified.
Engage Paul