Episode 374 Deep Dive: Mark Jones | The Department of No Is Over - Why Cyber Has to Lead AI Adoption

Mark Jones is Co Founder of MosaicalAI and has spent more than 25 years working across cybersecurity, technology risk, governance and resilience in complex environments where decisions need to be defensible and the cost of getting it wrong is high.

His work sits at the intersection of security, business leadership and change. He helps organisations understand risk, build capability in their people, create practical operating models, and move with confidence when technology is changing faster than traditional governance can keep up.

Today, Mark’s work is focused on AI. At MosaicalAI, he helps Australian organisations rebuild how teams work for the agentic era. His view is that every team runs on three things: people, technology and data, but most teams are still operating on a model built before AI. MosaicalAI maps how a team works today, builds the agentic version beside it, then rebuilds it with them.

Mark’s approach is AI native and cybersecurity driven. He does not start with tools or generic productivity use cases. He starts with the team, the workflow, the data, the controls, the risks and the decisions that matter. The goal is practical AI capability that the organisation owns, understands and can govern.

Cybersecurity is MosaicalAI’s first proof point because it is where AI adoption gets real quickly. Cyber teams already understand risk, evidence, accountability, control and resilience. When they use AI to improve triage, reporting, exposure management, control mapping, evidence gathering and decision support, they are better placed to guide safe AI adoption across the broader business.

Mark believes AI cannot simply be bolted onto an organisation. It needs ownership, guardrails, evidence, accountability, resilience and control from day one.

He is a Certified Information Security Manager and Certified Information Systems Security Professional, combining practical executive experience with globally recognised security credentials.