Practical security, delivered personally.

My story

I'm Scott McArthur, founder and principal consultant at McArthur Infosec. I've spent 15 years working in IT and information security, including 10 years in the financial services sector, a highly regulated environment where security failures carry real consequences.

During that time I've led technology teams and spearheaded the implementation of control frameworks and Cyber Essentials certifications, taking organisations from initial assessment through to certified, well-run security programmes.

My background combines governance, risk and compliance with hands-on technical expertise in networking and cloud security. That means I can speak the language of the board and the auditor, and work credibly alongside your IT team or managed service provider.

I started McArthur Infosec because too many organisations are either sold products they don't need or handed paperwork that never changes how they work. My approach is simple: understand the business first, focus on the risks that matter, and leave you more capable than when I arrived.

How I work

• You work with me directly, with no hand-offs to junior staff.
• Independent advice, with no products or certification to sell.
• Plain English for the board, technical depth for your IT team.
• Right-sized documentation and controls, never box-ticking.