About Us | Revolution InfoSec | NZ & Australian Cybersecurity Consultancy
About Us

Revolutionising information security

Revolution InfoSec was launched in 2023 in response to a cybersecurity industry that was either too focused on box-ticking exercises or too interested in selling products. We believe the most important value we can provide is helping humans first. So we take a risk-first approach that starts with people, not technology.

"We make security get out of the way, so your business can keep doing what it does best."

Mission & values

We focus on your risk, so you can focus on your business

Too many cybersecurity businesses work with a "technology first" approach. We flip the script: assessing what matters to your business and making security get out of the way.  The lifeblood of your business information, which flows through People, Processes, Policies and, finally, Technology. We cover all of them.

People first. Risk starts with humans, not hardware.
Plain English. No fear, no acronym soup, just a safe place to talk without geek speak.
Efficient by design. Latest technologies, low cost, maximum outcome.
Why it matters

Our businesses are underprepared for a cyber event

Where other security companies focus on "just-in-time" detection, response and recovery, Revolution InfoSec exists to help organisations identify, protect and prevent cyber risks before they can hurt your organisation. Recent New Zealand studies make the case plainly:

59%
of NZ businesses experienced a successful cyber attack in the past 12 months. Two-thirds were significantly impacted.
17%
saw personal information accessed or stolen during a security incident.
10%
paid a ransom to stop their business or clients being further exposed.
24%
of New Zealand's large businesses are not confident they could recover from a major cyber incident.
Industry engagement

Nine-plus sectors, NZ and global

Our client base is diverse, giving us great exposure to the needs of businesses and government alike, not just in New Zealand and Australia but globally. We currently serve these sectors and more:

Financial & Insurance Digital, IT & Software Government Aviation & Astronautics Logistics Healthcare Primary Industries Construction & Housing Legal & Professional
Expertise & credentials

20+ years' average experience per team member

Our staff have held senior roles at global companies such as Amazon, GE, Cognizant and Vodafone/One NZ, and at government entities including the New Zealand Ministry of Health and Defence. Leadership positions held include Chief Information Security Officer, Director of Cyber Security and Principal Cyber Security Consultant.

CISSP CISM ISO 27001 Lead Auditor (BSI) SABSA Chartered Security Architect AWS Security ITIL ITSM Red Hat Certified CIS & NIST frameworks NZISM SOC 2 · HIPAA · PCI-DSS
Our team

Meet the people behind Revolution InfoSec

Collectively, we draw on a lifetime of experience and hold certifications across every relevant discipline.

Alistair Ross
Alistair Ross
Chief Executive Officer
BSc (Hons) in Computing, and co-founder & CEO of Revolution InfoSec. Passionate about reducing organisational risk, he saw the need for a security revolution and created Revolution InfoSec in 2023. Over 25 years in security, IT and leadership.
Zach Annals
Zach Annals
Senior Consultant
Joined Revolution InfoSec in 2026. Zach brings hands-on security consulting experience across governance, risk and technical assessment to our growing client base.
Steven Webb
Steven Webb
Lead C&A Auditor
ISO 27001 Lead Auditor (certified by BSI). Leads certification and assurance audits across client engagements.
Mark Mai
Mark Mai
GRC Consultant
PG.Dip. Computer Security & Forensics, University of Canterbury. CISSP, CISM, SABSA Chartered Security Architect. ISACA 2011 CISM Oceania Excellence Award receiver.
Anna Lezhikova
Anna Lezhikova
GRC Consultant
GradDip, Computer Science. Certification readiness (ISO, NZISM), CIS & NIST risk assessments, secure cloud architecture (AWS) and SSDLC.
Marko John
Marko John
Penetration Tester
BSc, Computer Software Engineering. Trained across SOC 2, HIPAA, PCI-DSS and ISO 27001 testing frameworks. Delivers web, app, API and network penetration testing.
Christopher Ward
Christopher Ward
Senior Consultant
MSc Communication Information Systems Management. CISSP, Carnegie Mellon SEI Certified & Authorised Cyber Instructor. Cyber Research Fellow & Technical Advisor, Victoria University of Wellington.
Gaurav Arora
Gaurav Arora
Senior DevSecOps Engineer
Secure architecture (Azure & AWS), DevSecOps & IaC infrastructure, and secure implementation of AI.
Our partners
Trusted partners, when the job calls for it
We work with a network of trusted specialist partners across New Zealand and Australia, so every engagement gets the right expertise. Advisers and MSPs can also partner with us through our SecurityCentral partner programme.

Prevention is far better than cure

We are here to help you identify your cyber risk and protect your business where gaps exist. In plain English.

Get a free security health check