Richard Stewart

Cybersecurity Leader | Security Architecture | Cloud, API & Application Security | DevSecOps, Zero Trust | CISSP, CISM, SABSA | Microsoft Certified Cybersecurity Architect

Kingston Upon Thames, England, United Kingdom

About

I have 20 years’ experience designing and delivering enterprise security solutions across regulated sectors. I have a strong track record in defining enterprise-wide security strategies, leading high-performing teams, and enabling secure technology adoption at scale. I bring an outcome-oriented mindset to complex challenges, with both strategic vision and hands-on delivery. I specialise in delivering cybersecurity solutions end-to-end – from designing pragmatic architectures and embedding technology to leading agile delivery and operational handover – helping organisations adopt secure, cloud-native and DevSecOps ways of working. I served as Interim Head of Cybersecurity Strategy & Solutions at GSK, where I led enterprise security architecture, engineering, and project engagement. I’ve directed major security initiatives, including Web and API Protection and enterprise secrets management, delivering secure hybrid and cloud-native solutions end to end. I have deep expertise in network and application security, standards development, and solution architecture across the full lifecycle, from strategic need to operationalisation. I’m adept at engaging C-suite stakeholders and translating complex security challenges into pragmatic, risk-aligned architectures using the SABSA methodology. Previously, I held senior security leadership roles at AXA Insurance, including Acting Head of Security, and earlier in my career I led secure technology adoption and threat assessments at RBS. I began my career in defence and enterprise software security evaluations at Logica.

Experience

  • Head of Security Strategy & Architecture at AJ Bell
    Jan 2026 - Present · 7 mos

  • GSK (9 yrs 10 mos)
    • Director, Security Architecture
      Aug 2019 - Sep 2025 · 6 yrs 2 mos

    • Director, Senior Security Consultant
      Dec 2015 - Aug 2019 · 3 yrs 9 mos

  • Security Manager at AXA
    Mar 2012 - Dec 2015 · 3 yrs 10 mos

  • Senior Technical Security Analyst at Royal Bank of Scotland Group
    Aug 2010 - Mar 2012 · 1 yr 8 mos

  • Security Consultant at Logica
    Jun 2005 - Aug 2010 · 5 yrs 3 mos