Ben Jones
Ben is the Cyber Security Practice Lead at Coder Trove. He leads the team that runs our penetration testing, red team, Essential Eight, vCISO and governance, risk and compliance work for Australian organisations.
How Ben works
Ben has worked on cyber security from the vendor side, the buyer side and the tester's side, and he brings all three to every engagement. His career started in psychology, and it still shapes how he approaches security: people are the biggest risk in most organisations, and the best defence.
He was managing director of Continuum Cyber when Coder Trove's engineers built the Continuum Cyber platform. After several years of working together he joined Coder Trove to build its cyber security practice, with a full engineering and delivery team behind it.
Before that he co-founded Jumpstart Security, which brought enterprise-grade security to small and micro businesses, and worked in cyber security at InfoTrust. He was also lead risk manager on a NSW Telco Authority infrastructure programme delivering emergency services communications across 600 sites.
Boards and advisory roles
- Morfless, board member. Ben advises on cyber security compliance and governance for customers' cloud environments.
- Manly Together, board member. A Northern Beaches community initiative for men's mental health that raises funds for Spoke to a Bloke.
- Perpetual Hire, advisory board. Strategy, go-to-market and funding.
- Cybersecurity Advisors Network (CyAN). Founding member and former board member.
What Ben works on
- Supply chain risk, including the people who write your code. Much of his current work covers North Korean operatives who get hired as remote engineers in Australia and New Zealand, and the hiring controls that stop them.
- Essential Eight and ASD's Essentials. Maturity assessments, uplift programmes and what the transition to the Essentials means for existing ratings.
- AI governance. How organisations keep oversight of AI tools that are being adopted faster than their policies change.
- OT and ICS security, and security architecture at the browser layer.
In the media
HRD Australia · 4 November 2026
Fake job interview behind $9bn Binance heist puts hiring on notice
"The hiring process has become an attack surface in its own right, for candidates coming in and for employees being approached from outside."
HRD Australia · 16 October 2026
North Korean scammers are getting hired, then holding companies to ransom
"North Korea does not need to hack you. It just needs to get hired."
Briefings
27 October 2026: an executive briefing for Australian and New Zealand cyber security and HR leaders with Dan Elliott, Field CISO at Recorded Future, on how North Korean operatives use the hiring process to get inside companies.
Articles by Ben
- Automated Decision-Making: What Your Privacy Policy Must Say
- ASD Essentials: What It Means for Your Essential Eight
- Essential Eight Checklist: Evidence to Have Ready Before Anyone Asks
- Essential 8 Maturity Model Explained: What Levels 1, 2 and 3 Mean
- What Does a vCISO Do? A Few Days a Month, Explained
- How Much Does a Penetration Test Cost in Australia? (2026 Guide)
- Penetration Test Scoping: How to Scope a Test That Finds Real Risk
- Essential Eight Maturity: What Insurers and Auditors Now Expect
- Incident Response Tabletop Exercise: Rehearse the Plan
Talk to Ben
Book a 30-minute call about an assessment you need, a test you are scoping or a question from your board. The cyber security practice page covers everything the team delivers.