Cybersecurity veteran Mark Jones starts AI advisory firm

Mark Jones, formerly Thales Cyber and Digital's director for solution architecture, has struck out on his own and started MosaicalAI.

The company builds the software, model layer, data connections, orchestration and governance to "make AI work" inside a customer's business. 

The 'mosaic' is an AI operating layer, comprised of the tools, portals, reports, workflows and decision surfaces a customer's team uses; agents, workflow logic, handoffs, approvals, routing and system actions; model selection, routing, fallback paths, version tracking and evaluation; connectors, retrieval, institutional memory, permissions, lineage and context; and logs, evidence, approvals, human sign off, drift monitoring and change control.

Essentially, MosaicalAI builds bespoke software for a single team - a Mosaic - with bespoke governance for the entire AI estate - a Mosaic Council. Each is engineered for one organisation’s environment, decisions and risks, owned by their team and evolved with MosaicalAI.

In a LinkedIn post announcing the launch, Jones said the company is "AI-native and cybersecurity-driven".

"That matters because we move fast, and we know AI cannot just be bolted onto a business and hoped for the best. It needs the same discipline cybersecurity has always demanded: ownership, guardrails, evidence, accountability and control," he said.

"Our work is practical and hands on. We help clients engage their people, build AI into their business, and govern it from day one.

"We are already working with mid-market and upper mid-market businesses, and we are looking for more teams who are ready to move."

Prior to Thales, Jones was at Tesserant as a senior partner, the deputy CISO for Medibank and the associate MD and ANZ leader for cyber risk at Kroll.

He has also served as the CEO and CISO of Enex Carbon, the director and CISO of RMSEC and the IT security, risk and assurance manager for United Energy and Multinet Gas.