Riaan Bronkhorst

Partner - Perth

Riaan is a Partner and leads the Security and Privacy Risk Services team in Perth. 

Riaan has extensive consulting and commerce experience in both the local and international markets with expertise across a range of industries.

Riaan has delivered security, privacy consulting, advisory, audit and assurance services for over 25 years for large Australian and multinational organisations in both the public and private sectors.

"Having first-hand operational, consulting and advisory experience, I have worked on an extensive range of technology risk management projects including cyber technical security, governance, strategy, data privacy, third-party risk, cloud security, new technology implementations, and many more. I thrive on helping organisations achieve their strategic cyber security governance goals, improve their security posture and implement better and practical cyber solutions that are fit for purpose and practical."

Residing from a small country town in the Free State (South Africa), Riaan has a humble sense of community and when his brain is not spinning a million miles an hour with practical and innovative ideas you can find him having a barbeque with family and friends, camping, four-wheel driving, watching sport and basically any activity that gets him outdoors.  

Solutions Riaan Bronkhorst provides

Riaan provides expert knowledge in the following areas:

• Cyber Security & Resilience Services
• Cloud Security
• Technical Security Assessment
• Information and Data Privacy
• Information and Cyber Security Risk
• Security Transformation
• Information Technology Audit
• Corporate Security
• Forensic Technology
• Security & Privacy Services
• FIRB Data Conditions Audits and Assurance
• System and Organisation Controls (SOC) Reports
• Risk Advisory Services in Perth

SIGNIFICANT PROJECTS

• Designed and implemented various cyber security strategies and governance solutions and has completed several audit assurance, privacy, cyber security advisory and audit engagements against local and international regulations and better practices based on NIST Cyber Security Framework, Australian Government Essential Eight, ISO27001, General Data Protection Regulation (GDPR), Australian Privacy Principles, Payment Card Industry Data Security Standard (PCI DSS), ASAE 3150, 3402, and others for a range of clients.
• Performed and led various Cyber Security reviews, Cyber Strategy development, Business Continuity, Disaster Recovery, Incident Response, Cyber Resilience reviews, Security gap analysis and specialised technical security vulnerability assessments and penetration tests (VAPT) engagements for various organisations across various industries.
• Developed and implemented strategies and frameworks including cybersecurity governance, risk, assurance, project management, change management, software development, enterprise architecture and Information Management Systems.
• Provided assurance for various large and complex business projects including national, and international consolidation and migration of key financial, operational and legacy systems from various providers, technology and infrastructure platforms for various industries.
• Embedded data analytics into internal audit programmes and transformed internal audit functions using traditional internal audit techniques to continuous monitoring through data analytics.

Associations

• Information Systems Audit and Control Association (ISACA)
• The International Information System Security Certification Consortium (ISC)2
• Australian Information Security Association (AISA)

Qualifications

• Masters of Taxation, University of Sydney
• Bachelor of Commerce (Accounting), Macquarie University
• Certified Information Systems Security Professional (CISSP®)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified in the Governance of Enterprise IT (CGEIT)
• ISO/IEC 2700 Practitioner
• Certified Process Professional (CPP)
• Certified Enterprise Architect
• Certificates in Prince2, Agile PM, COBIT, ITIL, ACL