About Garry:

​Garry is a technology and information security leader who builds things from scratch in regulated environments.

​

Key Areas of Expertise

• ​Information Security & ISMS Build

• ​Technology Risk & Governance

• ​AI Governance & Agentic AI / MCP Security

• ​Regulatory Compliance (FCA-regulated environments)

• ​IT Leadership & Operations

• ​Third-Party & Vendor Risk

• ​Scaling Technology Through Growth

​Garry spent six years at Flagstone, the UK’s leading cash deposit platform, growing from IT Operations Manager to Head of Technology, including eighteen months as interim Head of Information Security, and sat on the Extended Leadership Team. In that time he scaled IT through the business’s growth from 80 to 400+ people, built the ISMS from the ground up, drove ISO 27001 to certification readiness, held Cyber Essentials Plus across four consecutive cycles, and wrote Flagstone’s first AI governance policy in March 2023, well before most regulated firms had started asking the question.

​More recently he co-developed MCP server security guidelines as agentic AI entered the technology estate, working through data classification, shadow MCP risk, and the gaps legacy DLP and CASB tooling can’t cover, ahead of the NSA’s first MCP security advisory in May 2026.

​His approach to security is practical over theatrical, the real win is when governance becomes part of the culture rather than a layer of friction on top of it. He mentors on building governance and AI adoption that hold up to regulatory scrutiny without slowing the business down, grounded in what’s actually been built and tested, not theory.

​

About MentorHours:

​MentorHours are exclusively for Level39 members. These form part of the weekly curriculum offered to our 180 technology businesses who call Level39 home. For more information, email the team on members@level39.co