Description

Most AI and security governance advice comes from people who have never built the systems. I have, for over 20 years.

I help organisations get a grip on AI and security compliance without drowning in paperwork. Where it counts (EU AI Act, NIS2, ISO 27001, GDPR) I turn requirements into clear, defensible answers and controls your team will actually use. No reports nobody reads.

What I do:

Security questionnaire and vendor-risk responses, built from your real controls
AI acceptable use policy and AI / data risk register, ready to roll out
EU AI Act and NIS2 readiness: what applies to you, what to fix first
Fixed-scope deliverables with a clear price and timeline

My edge: 20+ years building and securing platforms for regulated organisations in justice, banking, transport, aviation and retail, with a consistent security-by-design approach (Kubernetes, CI/CD, identity and access, cloud).

My governance work is grounded in how systems are really built and operated, not slideware.

I take on a small number of focused engagements at a time. If you need credible evidence of how your AI and security are governed, or senior help making a platform safer, let's talk.

Industry field of expertise

Languages

Dutch
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Amsterdam (up to 50km)

Sirrapa Software Integration (Sirrapa BV),
Security & AI Governance Consultant / Security-by-Design Engineer
DIGITAL AND IT
January 2011 - Today (15 years and 6 months)
Sirrapa BV(Sirrapa Software Integration) is my IT and platform engineering
consultancy. For over two decades I have delivered complex digital infrastructure
for organisations across Europe, in public sector, banking, transport, aviation
and retail, with a consistent "security by design" approach.
I help teams stabilise and automate on-prem Kubernetes, CI/CD and cloud platforms,
and turn that discipline into practical security and AI governance readiness:
security questionnaire responses, AI acceptable use policies, and AI and data risk
registers, delivered as bounded, fixed-scope work.
The consultancy is available for a small number of focused
engagements at a time.
Kubernetes AI Governance DevOps Cybersecurity ISO 27001
CJIB (Dutch Ministry of Justice collection agency),
Cloud Engineer / Architect & DevOps Engineer
PUBLIC SECTOR
November 2019 - Today (6 years and 8 months)
Leeuwarden, FR, Netherlands
Embedded "security by design" across an on-premise cloud platform for a regulated public-sector body.
Designed and ran an OAuth2/OpenID API gateway (Gloo) and service mesh, centralising identity, access control and traffic policy.
Established repeatable, auditable delivery (automation and Infrastructure as Code) so platform changes stayed controlled and traceable.
Enabled delivery teams through workshops on secure, cloud-native ways of working.
DevOps Kubernetes Azure
Nederlandse Spoorwegen (NS), critical national infrastructure,
DevOps CI/CD Engineer
RAW MATERIALS INDUSTRY
May 2019 - October 2019 (5 months)
Netherlands
Helped a national rail operator move monolith functionality to controlled cloud services on Kubernetes and Azure.
Improved delivery discipline and services-minded design across the team.