Tony Law

About Tony

An offensive security company has no excuse for weak security at home. At CovertSwarm, that responsibility sits with Tony Law. He joined as Head of IT & Security in March 2024, and he leads the company’s internal IT and information security. He also develops and delivers its enterprise technology roadmap.

CovertSwarm’s workforce is fully remote, so there’s no office perimeter to lean on. Security has to travel with every person and every device. Tony strengthens identity security, endpoint protection, cloud security and information security governance. He improves IT service delivery, operational resilience and automation, keeping the environment secure and effective for people wherever they work. On AI, his focus is secure adoption, backed by governance, risk assessment and technical controls.

Tony brings over 30 years in enterprise IT infrastructure, cybersecurity and technology leadership. Before CovertSwarm, he held senior technology leadership roles at international organizations including Gallagher, IQ-EQ, Augentius and Toshiba Electronics Europe, leading infrastructure, engineering, architecture and technology transformation. His experience covers enterprise architecture, cloud security, identity and access management, IT operations, and technology integration after mergers and acquisitions. He is CISSP certified and studied at Queen Mary University of London.

Outside work, Tony has been a Fellow of the Royal Astronomical Society since 2005.

Areas of Expertise

• Cybersecurity strategy and leadership – Setting security direction and turning it into a technology roadmap the business can deliver.
• Governance, risk and compliance (GRC) – Building information security governance, risk assessment and compliance into how the company runs.
• Cloud security – Securing Microsoft Azure, AWS and Microsoft 365 environments.
• Identity and access management and Zero Trust – Controlling who can reach what, and verifying every access request instead of trusting the network.
• Endpoint security and device management – Protecting and managing the devices a fully remote workforce depends on.
• Security awareness and training – Helping people recognize and report threats aimed at them.
• AI governance and secure adoption – Putting governance, risk assessment and technical controls around AI so the business can adopt it securely.
• Enterprise IT architecture and transformation – Designing infrastructure and leading technology change, including integration after mergers and acquisitions.
• IT operations, service management and automation – Improving IT service delivery and automating manual processes.
• Business continuity and disaster recovery – Keeping the business running and recovering quickly when systems fail.

Certifications & Memberships

Certifications

• AC|CISO (Associate Certified Chief Information Security Officer), EC-Council, 2024
• Microsoft Certified: Azure Fundamentals, Microsoft, 2023
• Microsoft 365 Certified: Fundamentals, Microsoft, 2023
• CybSafe Certification in Security Awareness, CybSafe, 2021
• CISSP (Certified Information Systems Security Professional), ISC2, 2018
• SSCP (Systems Security Certified Practitioner), ISC2, 2017
• AgilePM Foundation, APMG International, 2017
• ITIL v3 Foundation, BCS, 2010
• Sun Solaris Certified Systems Administrator, Sun Microsystems, 2001
• Microsoft Certified Professional, Microsoft, 1998

Memberships

• Fellow, Royal Astronomical Society (FRAS), since 2005
• ISC2
• IEEE
• Institute of Physics (IoP)