Skip to content
Antan · Antonio SperaAuckland, NZISO/IEC 27001 LI

Set strategy in the boardroom. Still write the code.

Twenty-five years of security leadership for boards, governments, and critical infrastructure, as an engineer and architect across quantitative risk, secure AI, and SOC engineering. Antan IRM, the risk platform I built and use with clients, is one of the tools.

Risk snapshot // FAIRillustrative

Annualised loss exposure

  • P10$1.2M
  • P50$4.8M
  • P90$11.6M
Control uplift−38% expected loss
Modelled in Antan IRM

Practice areas// the breadth, by design

  • Cybersecurity
  • Secure AI
  • R&D
  • Quantitative risk analysis
  • Security architecture & design
  • Privacy & compliance
  • Security strategy (vCISO)
CredentialsISO/IEC 27001:2022 LIForrester Zero TrustOWASP NZ co-founderISACA member
01Services

Senior advisory and delivery across the security stack

From board-grade risk quantification to the code that runs in your SOC. Engagements scale from a four-week certification sprint to multi-year programme leadership.

02Track record

Some of the work

A sample of anchor achievements across regulated, public-sector, and critical-infrastructure environments.

01Security functionTechnology

Designed and led the security function end to end at one of New Zealand's largest technology organisations, with ISO/IEC 27001:2022 and SOC 2 Type 2 as the outcome.

02SOC + PCI-DSSGovernment

Designed and built a government agency's Security Operations Centre end to end across people, process, and technology, and drove a long-stalled PCI-DSS programme through to compliance.

03ArchitectureCritical infrastructure

Collaborated on the security architecture for one of New Zealand's most significant infrastructure projects.

04Co-founderOWASP NZ

Co-founded the OWASP New Zealand chapter and continues to contribute to the security community.

03Built in-house

Antan IRM - risk that has left the spreadsheet

An AI-powered cyber risk platform I built and use for quantitative risk and decision analysis. It began as a replacement for the risk register in a spreadsheet and grew, function by function, into a tool that turns scattered security data into quantified, board-ready decisions, with a deterministic guardrail that keeps its own AI agents in check.

It is still a work in progress, and improving steadily. Try the demo, and if you would like to know more, get in touch.

Explore Antan IRM
Loss distribution // Monte Carlo10k runs
$0expected loss$20M+
Get in touch

Let's talk about your security programme

Whether it is quantifying a risk in dollars, securing an AI deployment, or standing up the SOC that runs it, the work starts with a conversation. The first one is on the house.