Craig Thompson

Cloud and Cyber Security Expert

London, England, United Kingdom

About

A Master’s educated CISSP, CISM, CCSP, CISA, CRISC, Cyber Security, Technology Risk, Audit and Compliance professional. I have 15 years’ experience leading and delivering in fast-paced, dynamic environments for the largest and most heavily regulated Cloud Service Providers. I have proven stakeholder management and communication skills; confident building relationships with the C-suite to globally dispersed technical teams, external Clients, Regulators and Certification bodies. I have extensive experience successfully delivering in Cloud Security and Cyber Risk roles within the most heavily regulated contexts. I currently lead the delivery of global, strategic, Payment Card Industry (PCI DSS) assessments for SAP within Public Cloud Service Provider contexts. Additionally, I am responsible for delivering multiple global security initiatives, including global Certification and Attestation across a number of Cyber security frameworks and standards, including: ISO27001:2022, ISO42001: 2023, SOC2, UK Cyber Essentials Plus, CSA STAR and PCI DSS.

Experience

  • SAP ()
    • Information Security and Compliance Expert
      Apr 2026 - Present · 4 mos

    • Information Security and Compliance Senior Specialist
      Apr 2024 - Mar 2026 · 2 yrs

  • Information Security Consultant at Freelance
    Dec 2023 - Mar 2024 · 4 mos

  • Security Industry Specialist at Amazon Web Services (AWS)
    Aug 2021 - Nov 2023 · 2 yrs 4 mos

  • Information Security and Cyber Risk Lead at Leidos
    Jul 2017 - Jul 2021 · 4 yrs 1 mo

  • Information Security Lead at Mercer
    Jan 2015 - Jun 2017 · 2 yrs 6 mos