Architecture
Secure by design beats bolt-on security every time
Why the platforms that survive an ITHC are the ones built secure from day one.
Read more ↗INDEPENDENT CYBER & IT ADVISORY
Security you
can trust.
I help growing businesses protect what they’ve built — with clear-headed cyber security and IT consulting, free from vendor spin.
BASED IN LANCASHIRE · WORKING UK-WIDE
Explore my services ↓SECURE
YOUR
BUSINESS
ABOUT ANDREW
25+ years in security. No jargon, no upsell.
I’m Dr Andrew Rimmer, an independent security architect and consultant with a PhD in computational chemistry and a career built on securing some of the most demanding platforms in government and regulated industry. I hold current UK security clearance and have worked as a CLAS-pedigree consultant, ISO 27001 Lead Auditor and NCSC Certified Cyber Professional across cloud, big data and on-premise environments.
I don’t sell products or take reseller commission — you get direct, hands-on delivery from someone who has built, secured and accredited these platforms personally, not just advised on them from a slide deck.
See how I can help ↗WHAT I DO
Practical security.
Real outcomes.
01
Cloud security architecture
Secure-by-design architecture and migration across AWS, Azure and Oracle Cloud, from HLD through to hands-on build.
↗02DevSecOps & secure automation
Terraform, Ansible, Packer and pipeline-driven builds with security engineered in from the first commit.
↗03Government accreditation & compliance
Risk assessment and accreditation against HMG standards and ISO 27001, built on years as a CLAS-pedigree consultant and Lead Auditor.
↗04Incident response & resilience
Preparation, live support and recovery so a bad day never becomes a bad year.
↗BY THE NUMBERS
A career built
on delivery.
25+Years in security & infrastructure
3Cloud platforms — AWS, Azure, Oracle Cloud
PhDComputational chemistry, UMIST
ActiveUK security clearance, held continuously
HOW I WORK
Independent by
design.
No commission on products, no reseller agreements — just a straight assessment of what your organisation actually needs, and a clear plan to get there. You get direct access to me, not a rotating account team, and every engagement stays confidential — I never publish or reference client names.
WHO I WORK WITH
Every sector carries a different kind of risk.
My background spans central government, financial services, healthcare, utilities, retail and pharmaceutical organisations — each with its own threats, obligations and accreditation demands.
- Government & public sector ↗
- Financial & professional services ↗
- Healthcare & life sciences ↗
- Utilities & regulated industry ↗
CASE STUDY
Building a self-sufficient
cloud engineering team.
I designed and stood up an elite, cross-functional cloud engineering and security capability for a large-scale, highly regulated platform programme — one team owning design, build, security and operations end to end, with security built into the pipeline rather than bolted on afterwards.
Read the case study ↗CREDENTIALS
Certified to the
standards that matter.
CISSPCCP IA Architect (NCSC)CCP SIRA (NCSC)ISO 27001 Lead AuditorCyber Essentials PractitionerAZ-500 Azure SecurityAWS Security Essentials
Compliance
Accreditation is a milestone, not a destination
Moving from a point-in-time sign-off to continuous assurance.
Read more ↗Cloud Security
What 25 years of firewalls teaches you about the cloud
The principles that carried across from PIX and FW-1 to IAM and security groups.
Read more ↗LET’S TALK