About
Carl Pitts, cyber security Programme Manager.
Over 20 years leading enterprise security and technology programmes for organisations such as Airbus, easyJet, Stellantis, GSK and EDF, combining PRINCE2, MSP and PMP discipline with CISSP, CISM and CISA security depth.
Carl specialises in Security Operations Centre (SOC) implementations, SIEM platforms (Microsoft Sentinel, Splunk and IBM QRadar) and the integration of operational technology into security monitoring across aerospace, automotive and manufacturing environments.
He works across critical national infrastructure and regulated sectors, including energy, aviation, defence and pharmaceutical manufacturing, taking programmes from business case and governance through cutover, Hypercare and transition to business as usual.
A former PRINCE2 and MSP trainer, Carl is also an author on cyber security and project management, owner of Cyber-Fool.com and founder of the Cy4Sec cyber security consultancy.
He is available for new programmes, advisory work and interim delivery, working alongside his current role.
20+
years' enterprise delivery
€250M
largest portfolio held
1,200+
professionals trained
97%
training pass rate
Experience
Selected programmes
Palo Alto Networks
2026 to presentProfessional Services Programme Manager
Directing the GSK network security transformation (Prisma Access for around 100,000 users, 533 firewalls migrated), the GSK OT firewall refresh across 39 sites in 14 countries, and the EDF Programme. Carl works with PMGuide clients alongside this role and is open to new programmes.
SEFE
2025 to 2026Cyber Transformation Programme Manager
SIEM and defensive architecture transformation for a European energy supplier in a regulated CNI environment, with NIS2 and NIST aligned remediation roadmaps.
Stellantis
2023 to 2025Cyber Transformation Programme Manager
Owned a $50M global cyber transformation, including the SOC operating model and Microsoft Sentinel, achieving 30% faster detection and response.
easyJet
2021 to 2023Future SOC Transformation Programme Manager
Modernised the SOC on Splunk, delivering 25% faster incident response and vulnerability management across 10,000 endpoints.
Airbus
2018 to 2021Cyber Security Transformation Programme Manager
Managed a €250M global portfolio across 150,000 devices, achieving a 30% risk reduction and €30M in avoided breach costs.
ILX Group
2017 to 2018Associate Trainer and Consultant
Delivered PRINCE2, MSP, MoR, ITIL and Scrum training for clients including Deloitte, Airbus and the United Nations.
Etihad Airways, Virgin Atlantic, Rubicon
2004 to 2017Senior IT Programme and Project Manager
Data centre migration, PMO establishment, global system rollouts and disaster recovery programmes.
Certifications
Cyber security
CISSP, CISM, CISA, Certified Ethical Hacker (CEH), AWS Certified Security Speciality
Programme and project management
PMP, PRINCE2 Practitioner and Trainer, MSP, MoR Practitioner and Trainer, Scrum Master, ITIL V4
Microsoft
MCSE, MCSA, MCT