Profile
About
I help EU-licensed fintechs build defensible cybersecurity governance that survives regulatory review.
I've been a CISO since 2008, working in IT and security since 2001. The last decade has been focused on financial services: former CISO at EU and UK-licensed financial institutions, under Bank of Lithuania, Central Bank of Cyprus, and UK FCA supervision. Names withheld per engagement NDA.
In 2020 I founded CyAdviso (SIA, Latvia) to bring CISO function to fintechs that need it but cannot justify a full-time hire, typically EMIs, PIs, and CASPs of 30-200 people working under DORA, NIS2, and local cyber-resilience regimes.
Based in Riga, Latvia. Chapter Lead at OWASP Riga and Cloud Security Alliance.
Topics
What I think and write about
- Regulator-facing governance: how DORA, NIS2, and MiCA actually land in practice for EU-licensed entities
- ICT third-party oversight: Article 28 Register of Information, contract clauses, concentration risk
- Evidence and audit trails: why the same control questions keep coming back and how to stop them
- Management body accountability: DORA Article 5 personal liability, board-level cyber oversight
- vCISO function design: named ICT-risk ownership for firms too small for a full-time hire
Writing
Selected pieces on fromCISO
-
The job was never to remove the risk Jul 28, 2026
Track record
Credentials
- Certifications
- CISM (ISACA) · CDPSE (ISACA) · SABSA Foundation · SABSA Foundation SCF
- Community
- OWASP Riga Chapter Lead · Cloud Security Alliance Chapter Lead
- Career
- CISO since 2008 · in IT and security since 2001
- Regulator coverage
- UK FCA · Lietuvos Bankas · Latvijas Banka · Central Bank of Cyprus
- Location
- Riga, Latvia · EU resident
Contact
Connect
For consulting enquiries, see cyadviso.com. For everything else, email or LinkedIn works best.