United Kingdom
Delivery-focused information and cyber security professional with an MBA degree and over 15 years of experience in the compliance, risk, information, and cyber security domains. Successful track record of delivering a multitude of end-to-end security initiatives and time-critical implementation projects spanning a diverse client portfolio across various sectors. Sector Experience: UK Government, Wider Public Sector, Banking & Financial Services, Communications Media & Technology, Insurance, Transport, Technology/IT, Fin-Tech, Legal, Real Estate and Asset Management Core Skills: ISO 27001 Lead Auditor, Implementer and Consultant, Risk and Compliance Management, ISMS Implementation, Gap Analysis, Cyber Threat Profiling, Security Incident Response, Third Party and Supply Chain Due Diligence, Security Bids / Tenders, Development of Security Policies and Procedures
• Providing an array of information security and assurance services for clients spanning multiple sectors. • Delivering end-to-end implementation for standards such as ISO 27001, SOC2, NIST and Cyber Essentials. • Establishing ISMS, writing security policies and procedures, performing gap assessments, regular engagements with senior management (C-level executives and stakeholders), developing risk assessment methodology, treatment plans and KRIs, technical and administrative control implementations, conducting training and awareness workshops, measuring compliance and security metrics (KPIs), developing audit programmes, performing audits, conducting supply chain security assessments. • Undertaken a variety of roles for various client projects such as, Interim Head of Information Security, Deputy Head of Information Security & Compliance, ISO 27001 Lead Auditor, Security Consultant and Information Security Officer.
• Software development and support services, requirement analysis, project planning, secure coding, web design, use cases, code reviews and testing.