.svg){kind=logo}
After leading technology, customer, and revenue functions at 6clicks, Buker steps into the CEO role as organisations navigate the move from intelligent GRC towards continuous assurance, and growing pressure to adopt agentic AI.
Melbourne, Australia – 1 October 2026. 6clicks, pioneer of the sovereign GRC infrastructure, today announced the appointment of Dr. Heather Buker as Chief Executive Officer, marking a new chapter for the company as organisations face a growing question: how ready is their GRC environment for the next wave of AI?
Buker succeeds 6clicks founder Anthony Stevens, who will remain closely involved as the Executive Director of the 6clicks board while focusing his attention on an adjacent strategic venture. For Buker, the move to CEO is the latest step in a career spent solving GRC and cybersecurity problems from multiple sides of the table.
An engineer by training, she began her career working directly with organisations to implement and develop security and GRC systems before moving to solution architecture and product management. She joined 6clicks in 2021 as Director of Technical Operations in the US, before becoming Chief Technology Officer, Chief Customer Officer, and most recently Chief Revenue Officer.
That progression has given Buker a uniquely broad view of the GRC problem: from how technology is architected and implemented, to how customers use it, how products respond to those needs, and, most importantly, how technology translates into business value.
Now, she will lead the company after serving half a decade on the front lines.
“There's a lot of attention around agentic AI right now, and for good reason. But before asking what agents can do for GRC, organizations need to ask whether their GRC environment is ready for them,” said Buker.
"You don't get from structured GRC to continuous assurance simply by adding agents. The controls, evidence, ownership, data, and governance need to be in place, and organizations need to be successfully using intelligence first. Otherwise, we're simply adding more technology to an immature system and, therefore, potentially creating problems instead of solving them."
Dr. Heather Buker, 6clicks CEO
A maturity path to continuous GRC
6clicks sees GRC maturity progressing through a clear path:
Structured → Intelligent → Continuous
Structured GRC establishes the foundations: bringing frameworks, controls, evidence, risks, and workflows into a coherent system.
Intelligent GRC builds on those foundations, connecting GRC records and applying intelligence across evidence, controls, tests, frameworks, and requirements while keeping people accountable for decisions.
Continuous assurance is the longer-term destination: reducing the gap between what is happening across an organisation and what its GRC environment knows, so assurance can increasingly respond as conditions change rather than being reconstructed periodically.
The distinction is becoming more important as agentic AI gains momentum.
For 6clicks, agentic capability isn't another stage of GRC maturity or a shortcut to continuous assurance. It is an execution layer that extends GRC data and processes into the operating environments where controls, evidence, and risk actually live.
"Our job is to help organizations become agentic-ready. That starts with helping them understand where they are today and establish the governance needed to move from point-in-time compliance to intelligent, continuous, evidence-led assurance. I am honored to usher in this new chapter in 6clicks’ journey and help lead more organizations through this shift."
Dr. Heather Buker, 6clicks CEO
As CEO, Buker's priorities will include advancing Intelligent GRC, helping customers mature how they use intelligence today, building the foundations for more continuous assurance, strengthening the company's global partner ecosystem, and maintaining governance, sovereignty, and human accountability as automation increases.
Founder-backed succession
Stevens said Buker's appointment reflects both her progression within 6clicks and the way she approaches complex problems.
"I've watched Heather take on increasingly complex problems across 6clicks, from technology through to customers and revenue. What has always stood out is how she approaches them. She gets underneath the problem, understands how the pieces fit together, and then makes the call. That's exactly the kind of leadership 6clicks needs for what comes next. I remain deeply invested in 6clicks as founder and a member of the executive board, and I couldn't think of a stronger person to lead the company from here."
Anthony Stevens, Executive Board Director, 6clicks
Stevens founded 6clicks with Louis Strauss and Andrew Robinson and will continue to contribute to the company's long-term direction through the executive board.
His operating focus will shift to a separate strategic venture, where he serves as Founder and CEO together with Strauss, addressing the emerging challenge of compliance infrastructure for an increasingly agentic world.
Buker will work alongside Robinson and the 6clicks executive leadership team as the company continues to advance its technology and global customer and partner ecosystem.
From implementing GRC to defining what comes next
Buker holds a doctorate in Information Technology specialising in information assurance and cybersecurity, a master's degree in engineering management, and a bachelor's degree in computer engineering.
Her career has spanned GRC software development, implementation, consulting, solution architecture, product management, technology leadership, customer leadership, and commercial leadership. That breadth will shape how she approaches the CEO role, particularly at a time when rapid advances in AI are creating pressure for organisations to adopt new capabilities before the foundations required to govern them are fully understood.
This momentum builds on 6clicks’ latest iGRC milestone, shaped by valuable insights from its 2026 Ready for Sovereignty tour, enabling demonstrable control for complex, highly regulated organisations.
About 6clicks
6clicks is sovereign GRC infrastructure for government, defense, critical infrastructure, and global enterprises. Founded in Melbourne, 6clicks combines a proven GRC Core, an extensive Content Library, and a deployment architecture designed to give organisations greater control over where their GRC data operates. The platform automates evidence collection, validation, and mapping to controls and requirements, connects to IT, OT, hybrid, and restricted systems, enables multi-entity management via the Hub & Spoke architecture, and delivers purpose-built GRC intelligence designed for environments where traditional vendors and automation platforms cannot operate.
Media contact
marketing.admin@6clicks.com
%20-%20Template%206%20(1).png)
