Suggestions
George Arronis
IT Executive | CISO | Head of Cyber Security | Technology Risk & Compliance
George Arronis is a seasoned information technology professional with extensive experience in information security, risk management, and consulting across multiple industries, including finance, retail, public services outsourcing, and technology. He has demonstrated leadership across diverse organizations, driving IT, security, or technology risk outcomes while providing cybersecurity strategy, program establishment, and compliance transformation services. With a strong record in cybersecurity program establishment and compliance transformation, Arronis is a recognized casual academic in cybersecurity at the University of Technology Sydney.
Arronis holds a Master of Engineering Science and a BE (Hons) from UNSW Australia, as well as Graduate Certificates in International Law Practice and Professional Legal Studies from Griffith University. He has held leadership positions in several organizations, including Greenlit Brands, where he serves as the Group Information Security Manager, the Commonwealth Bank, where he held the post of Head of Technology Risk- ES Controls Office (Cyber Security), Serco Asia Pacific, where he served as Head of IT Security & Risk (CISO), and BT Financial Group, where he was the Technology Risk & Compliance Manager. Before that, Arronis worked at JP Morgan as IT Risk Manager and IBM as a Technology Analyst, Consultant, and Senior Consultant in Business Consulting Services.
Arronis' expertise includes Security Strategy & Architecture, Security Consulting, Sales & Bids, Security Operations, Cybersecurity Program Establishment & Compliance Transformation, Risk Management, Information Security Programs (ISMS) - ISO 27001, ISM/ PSPF, and Compliance & Regulatory Risk - CPS234, Privacy, GS007, PCI/DSS, among others. With extensive skills in IT project management, contract management, and due diligence, he has driven third-party assurance and risk management, as well as operational risk management and non-financial risk reporting.