Who We Are

The advisor who has actually carried the risk.

I do not come to this work as a pure technologist, and I do not come to it as a consultant who has only ever advised from the sidelines. I have planned operations, built a company, sat on boards, and made the calls that keep leaders awake at night. That is the story behind SJ Strategy.

The Pattern

Ten years into cybersecurity, one scene kept repeating itself, almost word for word. A board meeting. The CISO presents. The room nods along, some more convincingly than others. Then, the moment the meeting breaks up, someone pulls me aside and asks, quietly, what they should actually be worried about.

These were not unintelligent people, far from it. Hand them a balance sheet or a tricky piece of market risk and they would pull it apart without breaking a sweat. Cyber was different, not because they lacked the intellect, but because nobody in the room had ever bothered to translate the risk into language a business leader could actually use. An entire profession had grown up that could talk fluently about threats yet somehow could not communicate upward, and executives were left making multi-million-pound decisions on hope rather than understanding.

That gap, more than anything else, is why SJ Strategy exists.

What Makes Us Different

Pure technologists often struggle to speak the language of the boardroom. Management consultants can talk strategy beautifully while never having run anything under real pressure. I sit in neither camp, and that is deliberate.

Long before cyber entered the picture, I planned and led operations in some of the most demanding environments in the world. I advised at Big Four level. I built a cybersecurity company from nothing and grew it past seventy people, learning firsthand what good leadership looks like, and what bad leadership costs. I have sat in the executive chair and around the board table, making the same calls I now help other leaders make.

That combination is rare, and it changes the conversation entirely. We am not here to teach anyone the technology. We are here to help leaders govern the risk, because we have have carried it ourselves.