Expanded upon previous experience via a change to a compliance focused roleAssisted with external on-site auditing and ISO gap analyses of clientsInternal work performed within a defined schedule & scope to meet the standards of ISO27001:2022, from a basis of overhauling existing ISO27001:2013 controls in place. Migration of non-compliant hardware and software systems, assisting aligning organisational policy and GPOs. Handling of corporate risk management, incident, and asset registers. Tasked with creation of a control mapping framework to be used for external 27001 consulting. Further gap analyses and internal audits conducted, as part of the company ISF, to ensure the 2013-2022 changeover deadline was met.

Studied and passed RITTech L4 HNC Cyber Security Technologist - CS Engineer with MeritResponsible for conducting Cyber Essentials pre-assessments via reviewing client security cases; involving identifying and analysing vulnerabilities within corporate systems, and discussing findings with clients to work toward achieving the CE standard by the mitigation, elimination, or acceptance of given risks. Collaboration with technical and administration teams to meet client deadlines & fulfil SLAsProfessionally mentored in corporate Penetration Testing geared around Nessus, Hydra, and BurpsuiteActively involved with internal and external auditing of group policy, organisational standards, and patch management for both the company and its clientsAssisted with the maintenance of a malware lab for in-house and corporate training intended for Penetration Testing. Further experience in experimentation and deployment of emerging threat packages via Metasploitable 2 and 3Technical report and blog writing for company promotion & client guidanceAchieved ACE Basic & ACE Advanced Practitioner certifications