Geoffrey Whitworth

Biography

I've spent my career where security has to hold up under scrutiny: defence-industry security, software for intelligence analysts, and now AI systems.

From 2018 to 2026 I was a senior security consultant with a defence-industry security consultancy. The work was audits, risk assessments, gap analyses, policy, incident response and penetration testing, measured against the ISM, the Essential Eight, ISO 27001 and DISP. I also designed and managed the build of classified workspaces up to Security Zone Five under the Protective Security Policy Framework (PSPF), including the networks inside them. I'm finishing a Bachelor of Information Technology with a minor in construction management, which covers the building side of that work. At the consultancy I later took on the CTO role too, so I've been responsible for the systems as well as advising on them.

Before that I was CTO of a company building software for intelligence analysts. I led the team building plugins for i2 Analyst's Notebook that pulled in outside data sources, and later worked on entity extraction from unstructured text and entity resolution. We also adapted the platform into a COVID contact-tracing tool. I presented on entity extraction, data protection and OSINT at CyberCon 2023.

Today I'm an AI engineer and security lead with an Australian technology group. I build AI systems and the security around them. That's why my advice on AI governance is practical. I write the code as well as the policy.

I started Cezanne Consulting in 2026 to bring that mix to businesses that need security they can show to clients, insurers and auditors. It's a one-person practice. The person on the first call is the person who does the work.