Contact 
Transitioning from a structured military career to the dynamic civilian world is both challenging and rewarding. After over 13 years in the RAF Police, i3Secure consultant Craig MacPhail embarked on a new path as an information and cyber security consultant.
Craig’s background in policing, forensic investigation, and operational oversight provided a solid foundation, but stepping into this fast-evolving field allowed him to grow in ways unimagined, shaping his career at i3Secure. Read on to gain an insight into Craig’s experience.
Over a Decade in the RAF Police
From Tactical Policing to International Deployments
My journey began in the Tactical Police Squadron, safeguarding high-value assets and personnel in high-pressure environments. Deployed twice to Afghanistan, alongside shorter missions across Europe, the Middle East, and the USA, I was tasked with maintaining security in situations where the margin for error was razor thin. These experiences sharpened my vigilance and risk management skills, qualities that are equally critical in identifying and addressing cyber threats today.
The trust and responsibility I was given in those early roles made a lasting impression. They shaped my ability to anticipate risks and act decisively, a mindset I now apply to securing information systems and mitigating cyber threats.
Transitioning to Law Enforcement
After my tactical policing role, I shifted to law enforcement duties, where I led investigations, conducted security patrols, and delivered awareness training. Managing incidents under pressure enhanced my decision-making abilities, while assessing security risks honed my analytical thinking. These skills prepared me for the precision required in forensics and ultimately shaped my approach to consulting.
Forensics: Developing an Investigator’s Eye and Leadership
Entering crime scene forensics demanded meticulous attention to detail and analytical precision. I led teams in evidence recovery, overseeing investigations throughout the UK and overseas. This role required adaptability and compliance with ISO standards, ensuring every case was managed with care and precision.
Leadership became a focal point during this phase of my career. Mentoring team members and implementing improved forensic procedures not only enhanced our evidence recovery processes but also cultivated a culture of continuous improvement. These lessons in leadership and attention to detail have proven invaluable in my current consultancy role, particularly in ISO 27001 and Cyber Assessment Framework (CAF) assurance.
Mentorship and Continuous Learning
Mentorship has always been a cornerstone of my career. From the RAF to i3Secure, I’ve championed professional development, guiding others to achieve their goals. I believe that fostering a culture of knowledge-sharing and continuous learning not only benefits individuals but strengthens teams, making them more effective and cohesive.
Strategic Oversight at HQ: Embracing Data-Driven Decisions
In my final RAF role, I transitioned into a strategic HQ position, focusing on high-level coordination and operational oversight. Using tools like PowerBI, I provided senior leaders with real-time insights, thus enabling data-driven decision-making. Although this role was less hands-on, it deepened my analytical capabilities and broadened my strategic perspective, skills I now apply to consultancy at i3Secure.
The Civilian Transition
Embracing Change and New Challenges
Stepping into the civilian sector came with its own set of challenges. Writing a tailored CV and attending career fairs were entirely new experiences. Thankfully, workshops through the Career Transition Partnership and conversations with mentors made the process smoother. Networking at events like the Cyber Security Expo helped me connect with others who had successfully navigated similar transitions.
Adapting to a remote role was another hurdle. I initially missed the camaraderie of the RAF, but developing a structured routine, setting clear boundaries, and fostering virtual connections helped bridge the gap. i3Secure’s supportive culture and regular team interactions ensured I stayed engaged and productive. Over time, I’ve come to view remote work as a powerful enabler of flexibility and focus.
Building Expertise as an Information and Cyber Security Consultant
Since joining i3Secure, I’ve immersed myself in the complexities of information and cyber security. Working with frameworks like ISO 27001, CAF, CIS Controls, and Secure by Design, I’ve gained a deeper appreciation for the importance of safeguarding information assets. My experience briefing senior RAF officers has proven invaluable in simplifying complex concepts for non-technical stakeholders, ensuring clarity and actionable insights.
For example, translating technical forensic findings into meaningful recommendations in the RAF mirrored my current work in helping clients navigate compliance challenges. This ability to make the technical accessible has become one of my greatest strengths in consultancy.
Looking Ahead: Excitement for the Future
As I continue to grow in this field, I look forward to the challenges and opportunities ahead. For anyone considering a similar transition, my advice is simple: embrace your skills, lean on your network, and stay open to learning. The information and cyber security world is always evolving, and I’m thrilled to contribute to protecting organisations’ most valuable assets.
Learn more about i3Secure’s cyber security consultancy services here.
