Father-son consulting practice bringing 30+ years of combined experience in network security, risk management, and compliance across diverse industries.
SCHEDULE CONSULTATIONA father-son security advisory practice built on decades of experience and a shared commitment to practical, business-focused security solutions.
Tilling Group began as a natural evolution of our combined expertise in security and risk management. What started as informal conversations about the changing security landscape evolved into a formal partnership, bringing together complementary perspectives from different generations of security professionals.
Our approach combines Michael's deep technical foundation in network security and infrastructure with Sam's modern perspective on governance frameworks and regulatory compliance. This blend of hands-on technical expertise and contemporary risk management allows us to help organizations navigate both traditional infrastructure challenges and evolving compliance requirements.
Senior Principal | Network Security Specialist
With over 25 years in information security, Michael brings extensive experience in network architecture, infrastructure security, and security operations. His career has spanned roles from hands-on network engineering to strategic security leadership across enterprise environments.
Michael's expertise centers on designing and securing complex network infrastructures, with particular depth in segmentation strategies, secure architecture design, and operational security practices. He's passionate about translating technical security controls into business-enabling solutions.
Areas of Focus: Network Security Architecture, Infrastructure Design, Security Operations, Technical Risk Assessment
Principal Consultant | Risk & Compliance
With over 5 years in cybersecurity, Sam has led security programs across startups, high-compliance sectors, and managed security service providers. Currently serving as Head of Information Security at Icon Investments, he specializes in building security operations from the ground up and achieving regulatory compliance.
Sam's experience spans from hands-on technical roles to executive-level strategy, including reducing cloud infrastructure costs by 53%, achieving ISO 27001 certification, and implementing Essential Eight frameworks across 20+ environments. He's particularly passionate about making security practical and accessible for organizations of all sizes.
Areas of Focus: Security Program Development, ISO 27001 & Essential Eight, Cloud Security (AWS), Vendor Risk Assessment, Compliance & Governance
Practical guidance on security strategy, risk management, and regulatory compliance tailored to your organization's needs.
Comprehensive evaluation of security risks aligned with business objectives and regulatory frameworks.
Framework implementation and assessment to meet industry standards and regulatory obligations.
Developing practical security approaches aligned with business objectives and resource constraints.
Building and maturing security programs from strategy through implementation.
Due diligence and ongoing evaluation of third-party security practices and controls.
Ongoing trusted advisor relationship providing guidance on emerging risks and opportunities.
Industry-recognized certifications and extensive practical experience in cybersecurity.
Cisco Certified Network Professional
Advanced networking certification demonstrating expertise in enterprise network architecture, routing, switching, and troubleshooting.
Certified Information Systems Security Professional
Advanced security certification demonstrating expertise across eight domains of information security practice.
Sophos Central Platform
Professional-level certification in deploying and managing Sophos security solutions including endpoint protection and network security.
Amazon Web Services
Training in cloud security architecture, identity and access management, and AWS security best practices.
The Open University (In Progress)
Comprehensive study in cybersecurity fundamentals, secure systems design, and information assurance.
Sam & Michael Tilling
Father-son practice combining 25+ years of enterprise security experience with 5+ years of modern risk management expertise across financial services, healthcare, and manufacturing.
Interested in discussing how we can support your security initiatives? Let's connect.