About me
I’m Chris Leach, founder and principal consultant of ProCiber. I help organizations make sound security decisions, write them down, and make sure they happen.
Twenty years in the engine room
I’ve spent more than twenty years working in IT, networking and security, most of it across distributed, multi-site environments with large device fleets, many users and constant change. I’ve built networks, managed identities and devices, monitored security alerts and worked through the day-to-day incidents that decide whether an organization is actually secure.
What that taught me is that most security problems aren’t technical. They come from decisions nobody owns: who should have access, which tools are allowed, what happens when someone leaves, who to call when something goes wrong. I started ProCiber to be the person who owns those decisions for organizations that don’t have a security team of their own.
I grew up in South Africa and spent years leading overland expeditions across Africa and South America before technology became my full-time work. Long routes in remote places teach you that preparation beats heroics. That’s most of what good security is. Today I’m based in southern Chile, working with clients in the United States and Chile, in English and Spanish.
Education and certifications
- Cybersecurity engineering degree, Instituto Profesional San Sebastián, Chile (in progress)
- Diploma in Ethical Hacking and Penetration Testing, INACAP, Chile (2025)
- CompTIA A+, Network+ and Linux+
Languages
- English (native), Spanish (professional), Afrikaans (professional)
Capabilities
What I can take on, for clients and for the teams I work with.
Governance, risk and compliance
Gap assessments, risk registers and control mapping against NIST CSF 2.0 and ISO/IEC 27001, plus Chile’s cybersecurity and data protection laws.
Policy writing
Security policies, standards and procedures, from acceptable use to incident response, written in plain English or Spanish.
IAM workflow design
Joiner, mover and leaver workflows, SSO and directory services, MFA rollout, admin access and periodic access reviews.
AI governance
AI use policies, AI tool and vendor risk reviews, and AI risk assessments aligned with the NIST AI Risk Management Framework.
Vendor and third-party risk
Security review processes for apps and suppliers, with risk scoring and clear approve or reject criteria.
Cloud workspace security
Security configuration of cloud productivity suites: organizational structure, sharing settings, context-aware access and admin roles.
Security operations
EDR and MDR alert triage and escalation, email security (SPF, DKIM, DMARC), incident response planning and tabletop exercises.
Network and automation
Firewalls, VPN and IDS/IPS on business networks, device management, and Python scripting against platform APIs.
The company
- Legal entity
- ProCiber SpA, registered in Chile
RUT 78.373.287-4 - Based in
- Puerto Varas, Los Lagos, Chile
- Serving
- Organizations in the United States and Chile
- Scheduling
- By arrangement, in English or Spanish
- Engagements
- Project-based work and B2B contracts, by arrangement