U.S.-headquartered · International offices United States (HQ)Muscat, OmanKarachi, Pakistan
Our firm

U.S.-headquartered. International by presence.

Headquartered in the United States with offices in Muscat, Oman and Karachi, Pakistan. Independent, senior-led technology and cybersecurity advice across borders.

Our offices

U.S. headquarters. Local offices in Oman and Pakistan.

United States — Headquarters
With established regional offices and direct contact options.

How we work

Security that works for the business.

We think the most useful security advisor is not a gatekeeper, but a partner who understands what the business needs to achieve, communicates risk clearly, and helps people make sound decisions.

01 / BUSINESS CONTEXT

We Get It.

You have a business to run. Cybersecurity, risk management, and regulatory compliance matter—but they're not why you exist. Security should support operational priorities, not compete with them. We begin by understanding your objectives and work to recommend solutions that fit your resources and real-world constraints.

02 / ENABLE, DON'T OBSTRUCT

We're Not the “No” Guys.

Too often, security becomes the department of “No”: a roadblock that relies on jargon instead of explaining business consequences. We start by understanding what you're trying to accomplish. Then we identify the inherent risks, explain their possible impact in plain language, and propose practical alternatives and safeguards.

Our role is to provide sound analysis and options—not to run your business for you. Risk decisions belong to authorized business owners, within applicable legal, contractual, and governance requirements. Sometimes a proposed course of action cannot responsibly proceed as planned; when that's the case, we explain why and help find another path.

03 / KNOWLEDGE TRANSFER

We Don't Mind Working Ourselves Out of a Job.

Our goal isn't to make you dependent on us. We invest in knowledge transfer, mentoring, and developing your team's capabilities. When an engagement ends, your organization should be better able to sustain and improve the results.

We welcome long-term client relationships. They should continue because we deliver value—not because we've made ourselves indispensable. If you no longer need us, we've done our job.

Senior Practitioners. Direct Engagement.

Our work is delivered by experienced professionals who connect technical realities with leadership priorities. We don't substitute an army of junior consultants for seasoned judgment.

Meet the practitioners →
Leadership & practitioners

Experienced people. Direct involvement.

Positroniq is led by senior practitioners whose complementary experience spans executive security leadership, privacy and risk governance, technical security assessments, investigations, and education.

Joshua J. Schmidt

Co-Founder, CEO & Principal Consultant

CIPP/US (current)Previously held: CISSP · CISA · CISM · PCI QSA

Joshua is an information risk management executive with more than two decades of experience developing and leading information security, privacy, IT audit, and compliance programs. He brings both executive leadership and hands-on advisory experience across financial services, healthcare, biotechnology, software and SaaS, government, and other regulated environments.

Areas of expertise

  • Security and privacy program leadership
  • Enterprise risk and IT audit
  • Governance and regulatory compliance
  • Executive and board-level advisory

Selected experience

  • Served as Chief Information Security Officer at Drake Software and held senior security leadership roles at Adaptive Biotechnologies and Vertafore.
  • Provided interim privacy leadership for a major international financial institution, addressing legal and regulatory requirements across 62 countries.
  • Built application security and incident response capabilities and developed multiyear information risk management strategies.

Professional contributions: Speaker and panel participant at more than 30 industry events; contributor to cloud security and privacy control-mapping initiatives.

Ted Ipsen

President & Chief Operating Officer

Previously held: CISSP · CISM · PCI QSA

Ted is a cybersecurity and technology risk executive with more than 30 years of experience combining senior advisory leadership with technical security testing, incident response, and digital forensics. His career began with high-technology crime investigations in law enforcement and expanded into global consulting, security research, secure development, technology governance, and specialist training.

Areas of expertise

  • Technical security assessments and testing
  • Digital forensics and incident response
  • Secure development and technical training
  • Technology risk and executive advisory

Selected experience

  • Served as interim CISO for a major airline and led cybersecurity consulting and technical assessment teams.
  • Directed security due-diligence engagements supporting major corporate acquisitions and led advanced security testing and research programs.
  • Developed and delivered cybersecurity and secure-development training in more than ten countries, including specialized programs for governments in Asia and the Middle East.

Professional contributions: Contributor to Practical Cybersecurity Architecture and speaker at RSA Conference and other industry events.

Collaborative reach

Strategic partners

Our strategic partner relationships extend the specialist expertise available to clients. These are the actual partner logos featured on Positroniq's previous website.

Partner logos are displayed from Positroniq's existing website assets. External links open the respective partner websites. Relationships and scope of collaboration are subject to the individual agreements.