Andy joined KPMG as Chief Information Security Officer (CISO) in July 2021, and in June 2025 he became the Digital Risk Partner.
Andy is a member of the UK and Group Risk Executives, and Chairs the UK firm’s Information Governance Oversight Committee (IGOC), and the Group’s Digital Risk Oversight Committee (DROC).
Prior to joining KPMG Andy has performed similar roles in Financial Services and Logistics firms, and was a Consulting Director at EY as part of the Cyber and Resilience practice advising Financial Services, Logistics, and Government clients. He has also founded and grew a Cyber start-up providing Managed Security Services. His first job after leaving University was as an Army Officer for 17 years.