News

Mattias Bitar on Cloud Security & Secure Transformation

Following Advisense’s recruitment of Mattias Bitar to strengthen our Digital Architecture & Engineering team, we spoke with Mattias and Bendik Mjaaland, who led the recruitment, about the experience and perspective Mattias brings to the role.

In the interview, Bendik shares what he looks for when building his team, while Mattias reflects on cloud security and secure transformation, the importance of clear ownership and effective controls, and how organisations can turn security gaps into practical improvements that reduce risk while enabling the business to move forward.

PERSPECTIVES | CYBER & DIGITAL RISK

What qualities do you look for when building your team?

Bendik: Human experts are needed to cut through the noise and help companies adopt and use AI technology in the right way. The market has been optimistically adopting AI at high speed, first assuming it could replace much of the expert competency they need. But as anyone with deep expertise in a certain area will tell you – when they review AI-generated content in their area of expertise, you see problems. After all, the language models have no real idea what they are talking about.

With all the shifts in markets and technology, we see a clear need for consultants to be more than just advisors. Hands-on expertise is becoming increasingly important. We hire consultants with the right attitude. The kind who contribute their expertise in a meeting, but also say, “I can take care of that for you.”

Welcoming Mattias to the team is a milestone for us. He is exactly the kind of ambitious and hands-on person we are looking for, combining the mindset of a techie with the drive of an entrepreneur.

What has most shaped the way you think about cyber security, and how does that influence your work today?

Mattias: Working across technology, security and business has taught me to always ask: “Secure enough for what, and for whom?” The answer depends on what the organisation is trying to achieve, what it needs to protect and the consequences if something goes wrong. That is why I believe security strategy needs to be aligned with business and IT strategy. I see security as an enabler. Risk appetite helps guide decisions, but security also has strategic value. It builds trust, supports resilience and gives organisations the confidence to adopt new technology and pursue opportunities.

Another thing that has shaped my thinking is that security is never static. What is considered secure today may not be sufficient tomorrow. This makes it important to question assumptions and think ahead. That perspective shapes my work today: understanding the business first, applying critical thinking, and making sure the decisions we make today can adapt to tomorrow’s needs.

How do you view the market and the reality our clients are facing right now?

Mattias: The pressure to keep up is nothing new, but the pace of change makes it increasingly difficult for clients to make informed decisions. They are expected to adopt new technology quickly, often before they fully understand its complexity, the risks involved or what it will take to operate it over time. It is easy to get excited about the possibilities. The harder conversation comes when the full cost becomes clear: integration, maintenance, security and the expertise needed to make it all work.

Security is still too often brought in after key decisions have been made. By then, addressing weaknesses can mean redesigning solutions, delaying delivery and adding costs that could have been avoided. Adopting AI or moving to the cloud changes how services are delivered, but organisations still need basic security with clear ownership, appropriate access controls, effective incident detection and reliable recovery. These need to be established from the start as a natural part of how technology is built and operated.

What will be important to you in your role as Director?

Mattias: Helping clients move from identifying security gaps to addressing them. By bringing business, security and technology teams together around concrete improvements, while sharing knowledge so that clients and colleagues can take the work forward. For me, it starts with the people. Building a team of highly skilled security architects and engineers who enjoy what they do.

I particularly value people who combine strong technical expertise with an understanding of the business and what it needs to achieve. That is also what I want our clients to experience: a partner they can trust, who understands their challenges and can contribute to both technical and management decisions.

Could you tell us about your professional background?

Mattias: My background is in digital and infrastructure architecture, with a strong focus on cloud security and IT transformation. I’ve worked across several sectors, particularly financial services, and spent much of my career in consulting, combining technical roles with IT service delivery.

Most recently, I worked as Cloud Security Lead at one of Sweden’s largest banks, by supporting its cloud adoption. My role covered both how cloud services should be secured and how that security would be maintained.

A recurring theme throughout my career has been bringing people with different perspectives together. I enjoy working at the intersection of technology, security and business, helping stakeholders understand the trade-offs, agree on responsibilities and move improvements forward.

What brought you to Advisense?

Mattias: What first stood out to me was the energy and the people. There was a strong sense of professionalism, but the conversations felt relaxed and personal. That combination appealed to me: people who take their work seriously and are easy to connect with.

Advisense gives me the opportunity to bring my experience from banking and cloud security to a wider range of clients and build on it with Advisense’s expertise in risk, regulation and cyber security. Being able to help develop our services, work with skilled people and build long-term client relationships made joining feel like a natural next step.