I used to work for Visa Europe and was their representative on the PCI Security Standards Council, so I contributed to the development of a number of PCI standards including PCI DSS, PCI PA DSS and P2PE. I was also responsible for Visa's PCI compliance programmes in Europe - so I've a detailed knowledge of who needs to comply with PCI DSS and how they need to demonstrate that. Before that I was a security consultant, a QSA and I've worked with lots of large merchants in Europe. I'm currently the chair of the UK Merchants' PCI Working Group.
I'm currently the head of information security for a large airline and I've previously guided the airline through PCI DSS and GDPR programs. I hold professional certifications in information security and privacy and have an LLM in Information Rights Law.
In my spare time I write PCI training courses for Pluralsight.