Our Team
The senior practitioners behind every IronGate engagement.
Ilya Polyakov
Principal Consultant
I give the leaders of regulated businesses a straight answer to the question every board eventually asks: are we OK?
Most mid-size companies cannot justify a $300K-plus full-time CISO — but the board, the insurer and the regulator still expect CISO-grade answers. That gap is what I close. As a fractional CISO I carry the security strategy, the obligations map (CPS 230, CPS 234, the SOCI Act, the Privacy Act, the Essential Eight) and the board narrative, and I stay accountable for them.
Before IronGate: Chief Security Architect for a NSW Government department spanning 20+ agencies (NSW CISO Award, 2023). Executive Manager, Cyber Architecture at Commonwealth Bank. Head of Security Engagement and Advisory at APRA. Solution Architecture leadership at IBM for the APAC region.
Alongside security leadership, I work extensively on AI security and governance — the policies, controls and architecture patterns that let regulated organisations adopt AI quickly without creating tomorrow’s incident. The security architecture depth is still there when it is needed: SABSA-aligned enterprise architecture, design assurance and strategy work, done personally rather than delegated.
IronGate sells no products. Where any commercial relationship could bear on a recommendation we make, we disclose it. If you want the most senior voice in the room to be accountable to you — feel free to connect.
Sushim Mukul Roy
Principal Consultant
Sushim is a cyber, risk, technology and program leader with more than 15 years’ experience helping organisations navigate complex security, regulatory and technology challenges.
His work spans financial services, telecommunications, government and defence, health, energy and other critical infrastructure sectors. Combining cyber security strategy, governance and large-scale delivery experience, Sushim helps organisations translate security strategy into practical implementation and measurable business outcomes.
He has led programs valued above $20 million, built cross-functional teams, and supported more than 75 organisations to strengthen cyber security and risk management capabilities through advisory, consulting and implementation leadership.
Sushim holds a PhD in Electrical Engineering specialising in radio frequency systems, is a security patent holder, and is PMP-certified with experience leading large projects and programs. He has a proven track record delivering work in highly sensitive and regulated government and defence environments where engagements demand the highest levels of discretion.
Grounded in engineering discipline, architectural thinking and first principles, Sushim brings clear problem framing and delivery leadership to complex environments. He regularly works with executive and technology leadership to frame cyber risk, prioritise investment and guide major security and resilience initiatives.