Regions · Australia

Fractional CTO and AI architect for Australian companies

Technology leadership for Australian founders, financial institutions and investors, with AI and platforms designed around the Privacy Act, OAIC guidance on AI and APRA's operational risk standard.

Book a 30-min call → Analyse your challenge

Who this is for

  • Startups and scale-ups in Sydney, Melbourne and Brisbane that need senior technical leadership.
  • Banks, insurers and superannuation funds working to CPS 230.
  • Health and research organisations building on sensitive data.
  • Investors backing Australian technology companies.

What shapes technology decisions in Australia

The OAIC has published guidance on privacy for organisations using commercially available AI products and for those developing and training generative AI models, including due diligence, accuracy and care with personal information12. For APRA-regulated entities, CPS 230 on operational risk management has applied since 1 July 2025, covering critical operations, business continuity and material service providers34.

Rule or standardWho it touchesWhat it means for architecture
Privacy Act and OAIC AI guidanceOrganisations using or building AI with personal informationDue diligence on AI products, private deployment options and accuracy controls
APRA CPS 230Banks, insurers and superannuation entitiesCritical operations mapped to systems, tolerance levels, tested continuity and vendor exit plans
Customer security reviewsB2B software and servicesRecognised controls, logging and incident response

Related reading: AI incident postmortems, SLOs and error budgets and private LLMs on-prem.

Typical first projects

  1. A CPS 230 technology review: critical operations, dependencies and resilience testing.
  2. Private AI for staff and customers with OAIC guidance built in.
  3. Cloud and platform reset with Terraform, Kubernetes and cost visibility.
  4. Technical due diligence for investors.

Time zones

Sydney is six to seven hours ahead of the Gulf. Australian afternoons overlap my mornings, and decisions are written up so nothing waits for the next call.

How engagements work

  • Architecture and AI readiness review (2 to 4 weeks): a clear picture of the current platform, risks and a prioritised roadmap.
  • Fractional CTO (ongoing, part-time): technical strategy, architecture governance, hiring and board-level communication.
  • Build and hand-off: hands-on delivery of a platform or AI capability, documented so your team can run it.
  • Technical due diligence: an independent view of a target's technology for investors and acquirers.

Every engagement starts with a free 30-minute call. See how I work for the full process.

References
  1. 1
  2. 2
  3. 3
  4. 4
FAQ

Common questions

Do you work with Australian companies?

Yes, remotely. Sydney afternoons overlap Gulf mornings, and I schedule regular sessions in that window, with written updates in between.

What does CPS 230 mean for our technology?

CPS 230 has applied to APRA-regulated entities since 1 July 2025, covering operational risk, business continuity and material service providers. I design critical operations, tolerance levels and vendor exit plans into the architecture.

Can staff use generative AI tools with customer data?

The OAIC recommends not entering personal information, especially sensitive information, into publicly available generative AI tools. I help set up private or enterprise options with the right controls.

Keep reading

Related

ServiceFractional CTOI work as a part-time CTO for founders, CEOs and boards who need experienced technical judgement now, and a team that can carry it on after I step back.→ServiceAI & LLM architectureI design and build AI systems that leadership can trust: grounded in your data, measured by evaluations, governed by your rules and priced so they make sense at scale.→ServiceTechnical due diligenceI give investors an independent, plain-language view of a company's technology, team and AI claims, so the risks are priced in before the deal closes, not discovered after.→InsightSame model, two ways to buy it: what Anthropic-managed Claude on Google Cloud changes for platform teamsSince 22 October, Google Cloud customers can use the full Claude Platform run by Anthropic, billed and authenticated through Google Cloud, alongside the existing Google-managed option. That is more than a procurement detail: who processes your data, where, and how quickly features arrive now differ by which door you use.→
Open to advisory, fractional CTO & select builds

Let's talk about what you're building.

The fastest route is a free 30-minute call. Prefer to write? Send a message and I'll reply personally within two business days.

Book a 30-min call → Send a message or analyse your challenge first →
Start a conversation

How would you like to reach me?

Book a 30-min callFastest. Pick any open slot on my calendar.→ Write in GmailOpens a pre-filled draft in your browser.→ Use my email appOutlook, Apple Mail or your default client.→

I reply personally within two business days. Time zones from the Americas and Europe to the Middle East and Asia-Pacific.