Having worked in the medical device industry for 30 years, I never planned to now focus on cybersecurity as a senior consultant. I started as a nuclear physicist, fascinated by atomic structures. Then I discovered medical technology - and realized that understanding complex systems could save lives, not just advance science.
For eight years at Philips Healthcare, I was a Clinical Scientist defining and testing CT imaging software. I sat in radiology departments, visited operating rooms, discussed cases with radiologists and surgeons, and learned that medical devices aren't abstract products - they're critical tools in treatment decisions.
Later, as a Team Lead for cardiac implants at Berlin Heart, I understood the weight of regulatory responsibility for Class III devices
that literally pump blood through patients' hearts.
These experiences fundamentally shaped my approach to cybersecurity. When I secure a medical device today, I don't just see code and networks - I see the clinician relying on accurate data, the patient trusting the technology, and the manufacturer trying to innovate responsibly under intense regulatory pressure.
Most consultants understand IT security 𝙤𝙧 medical devices. Few understand both. Even fewer have actually developed, tested, and commercialized them.
My philosophy is simple but hard-won: Technology must serve humans with flexibility, pragmatism, and ethical integrity. Security isn't about perfect solutions - it's about intelligent trade-offs. Compliance isn't about checking boxes - it's about building trustworthy systems. And expertise isn't static - it requires lifelong learning.
At 60, I'm still learning: pursuing CISSP certification, coding for pleasure with C#/.NET and Python. I believe curiosity and humility are professional assets, not weaknesses.