Security Architecture and Delivery
Greg Bunt, Co-Founder, Director and Fractional CISO, Insicon Cyber
A security, risk and enterprise architecture specialist with more than 25 years of experience across Australia and the Asia-Pacific region. Greg leads the delivery of complex cybersecurity programmes for organisations in banking, finance, telecommunications and Australian enterprise, and works as a fractional CISO across Australian and New Zealand engagements.
Speak with GregAreas of expertise
Greg Bunt co-founded Insicon Cyber in 2013 with Matt Miller. His career spans more than 25 years in security, risk and enterprise architecture across Australia and the Asia-Pacific region, and he has led large-scale cybersecurity initiatives from initiation through to delivery, on time and to budget, with measurable outcomes.
Where a lot of security advice stops at the recommendation, Greg's work is defined by getting programmes actually delivered. He leads the Insicon Cyber delivery teams with a hands on approach, and his particular strength is bridging technical architecture and operational leadership, which is what allows a security design to survive contact with the organisation that has to run it.
Security and enterprise architecture
More than 25 years designing security into enterprise environments across Australia and the Asia-Pacific region. Greg has designed cloud migration strategies, embedded security into software development lifecycles, and led organisations off legacy systems onto modern infrastructure. This is the discipline that underpins the Insicon Cyber approach to AI security architecture, where inference, data flow and tooling decisions determine cost, latency and security together.
ISO 27001 implementation and managed compliance
Greg is an ISO/IEC 27001 Senior Lead Implementer. He builds information security management systems and takes organisations through to certification by an accredited certification body, and works across NIST frameworks, the Essential Eight and the New Zealand Information Security Manual for clients operating on both sides of the Tasman.
Large-scale programme delivery
Leading complex cybersecurity programmes end to end for banking, finance, telecommunications and Australian enterprise clients. Greg's focus is delivery discipline: scope that holds, timelines that are met, and outcomes that can be measured rather than described. He leads and mentors the Insicon Cyber delivery teams directly.
Exposure management and pre-disclosure risk
The window between vulnerability discovery and exploitation is compressing, and AI is compressing it further. Greg works with clients on exposure management and the architectural controls that have to carry the load before a patch exists. He presented on this subject alongside TrendAI in September 2026.
Fractional CISO leadership
Acting as the accountable security executive for organisations across Australia and New Zealand that need senior security leadership without a full-time appointment. Greg holds Australian Government Baseline Security Clearance.
Recognition and credentials
- ISO/IEC 27001 Senior Lead Implementer
- Australian Government Baseline Security Clearance
- More than 25 years in security, risk and enterprise architecture across Australia and the Asia-Pacific region
- Co-Founder and Director of Insicon Cyber, winner of Retail Cyber Security Partner of the Year at the 2025 Benchmark Security Awards
- Insicon Cyber is a finalist in the Healthcare Security Partners category at the 2026 Benchmark Security Awards, and a finalist for Cyber Consulting Business of the Year, SME, at the 2026 Australian Cyber Awards
- Insicon Cyber is a finalist in the SMB of the Year category at the AISA Cyber Security Awards 2026
- Co-founded Insicon Cyber in 2013 and remains directly involved in client delivery
Approach
Greg's leadership philosophy centres on building strong relationships with clients and with his team, and approaching every engagement with a focus on excellence, innovation and long term value. In practice that means he is as invested in whether a programme lands as in whether the design was elegant.
His work is grounded in global best practice, including ISO 27001, NIST frameworks and Australia's Essential Eight, applied to the specific regulatory and operational reality of Australian and New Zealand organisations rather than imported wholesale.
He is also committed to mentoring the people around him and building an environment where the delivery team can develop professionally while producing exceptional outcomes for clients. That matters commercially as well as culturally, in a market where the Fortinet 2025 Cybersecurity Skills Gap report found Asia-Pacific organisations were the most likely of any region to say the skills shortage creates additional risk for them.
Source: Fortinet 2025 Cybersecurity Skills Gap Global Research Report, https://www.fortinet.com/resources/reports/cybersecurity-skills-gap
Speaking, media and commentary
Greg is available for media commentary, conference speaking, webinars and podcast appearances on security architecture, ISO 27001 implementation, cloud and legacy modernisation, exposure management and cybersecurity programme delivery across Australia and New Zealand. For media enquiries and speaking requests, contact info@insiconcyber.com.
Work with Greg
Greg leads engagements across Managed Compliance, CISO-as-a-Service, AI Security Architecture and the Adaptive SOC, alongside Matt Miller, Co-Founder, CEO and Fractional CISO, and an experienced management and consultant team who deliver the work day to day.
Managed Compliance
Designed properly. Delivered properly.
If you have a security roadmap that has not moved in twelve months, the problem is usually delivery capability rather than the roadmap. Start there.
Engage Insicon Cyber Cyber Readiness Assessment