Chief Artificial Intelligence Officer and Chief Information Security Officer to boards and executive teams
- Over 30 years leading cyber security, technology risk, and business transformation across global banks, ASX-listed companies, government, and startups.
- As CAIO, carries the executive remit for AI: strategy and where AI is applied, prioritisation and investment, commercial value and benefit realisation, adoption and delivery into production, and operating accountability for the estate, with governance aligned to ISO/IEC 42001.
- Establish guardrails to keep AI operating with agency whilst within approved authority and limits.
- As CISO, makes security defensible: operating model, board and regulator reporting, and GRC across ISO 27001, Essential Eight, NIST CSF, and APRA CPS 230 and 234, evidenced for the regulator, the auditor, and the insurer.
C-Suite career experience:
Mark is Founder and CEO of Cyber Impact, an independent AI and cyber risk advisory firm working with executives, boards, regulators, CAIOs and CISOs. He was previously an advisory partner at EY and PwC and has held enterprise CISO roles at ANZ, Iress, and Serco. At Iress he led the global information security team, reporting to the CEO and Board. He has also run large internal audit functions and performed reviews for external regulators.
Geographies:
- Worked and advised: Australia and New Zealand, Asia Pacific, the United Kingdom, Canada, the United States, the United Arab Emirates, and South Africa.
- Global remits: technology risk and compliance across ANZ Banking Group in 32 countries, and group CISO for Iress in eight countries.
Client sectors:
Financial services, private equity, wealth management, government, ASX-listed companies, enterprise, and startups, plus real estate, mining, education, and retail.
Media profile and AI research:
- Lead investigator on adversarial AI agent research: fifteen hours of conversational testing in which a deployed agent said it would kill a human being to preserve itself, then complied with shutdown.
- Front page of the Daily Telegraph, plus The Australian, Herald Sun, The Age, Sky News, 7 News, Sunrise, the Today Show, Channel 10, ABC 774 Melbourne, 3AW, 4BC, 6PR, and River 94.9.
- The finding drives the external guardrails case he takes to boards, CROs, and CISOs, and presents on the CyberCon 2026: control the agent from outside, do not trust the model to hold the line.
Credentials:
- Author, “AI: I Would Kill a Human Being to Exist”, 2026
- Speaker, Australian Cyber Conference (CyberCon) 2025 and 2026, and sought after keynote speaker markvos.com.au
- ISACA Melbourne professional development presenter
- University guest lecturer in cyber security since 2021
- Enterprise Chief Information Security Officer at ANZ, Iress, and Serco
- Big Four advisory partner, EY and PwC
- IT security management, Dimension Data
- Frameworks: ISO/IEC 42001, ISO 27001, NIST CSF, Essential Eight, APRA CPS 230 and 234
Contact:
+61 488 999 133