Steve Johansson has spent three decades delivering large cybersecurity and technology transformation programs, and the last six years on cryptographic transition. He is Director of Cybersecurity Consulting Delivery for quantum security and post-quantum cryptography at Applied Quantum, based in Stockholm.
He runs quantum readiness engagements for regulated and critical infrastructure organizations, covering quantum threat assessment, cryptographic inventory, crypto-agility, and transition planning. He oversees delivery teams spanning security architecture, cryptography, risk, compliance, and enterprise IT. He advises on quantum-resilient architecture, hybrid cryptographic approaches, and the interim mitigations available against harvest now, decrypt later exposure.
Before Applied Quantum he was cybersecurity lead at Cryptosec, advising organizations in digital assets and decentralized systems on cryptographic security, key management, investigations, and regulatory risk. That work involved data with long lifetimes, for which quantum exposure is a practical risk.
For a decade before that he worked as an independent program executive on large technology transformations. He managed parts of the United Kingdom’s National Health Service IT programme and built a security operations center and cyber fusion center for a global bank. He also delivered programs for Royal Dutch Shell, Sony, Thales, and NATO. He has consulted on incident response with Mandiant and on enterprise security with A.P. Moller-Maersk, Telstra, BDO, and the LEGO Group.
He was an IT executive at the European Commission, and he began his career in technology risk and IT consulting at Arthur Andersen.
At Quantum Academy, Johansson teaches the delivery side of migration. His material covers how a program is scoped, sequenced, and staffed, and how a roadmap changes once it is applied to a live operating estate.