Leading on Compliance for Waterstons, overseeing Information Security, Data Protection, Quality, Health and Safety etc for Waterstons UK & Australia

Assisting and advising a wide range of different clients from various sectors in overcoming Information security and governance problems and achieving Information Security, ISO27001, BS10012, Cyber Essentials and Data Protection/GDPR compliance.In addition I lead part of the security team and look after internal security and privacy.

This role had responsibility for the management of ICT and Information Security, Records Management, Data Protection, Freedom of Information, Environmental Information Regulations and Police Disclosure for the Authority. I managed a small team covering a wide variety of tasks in the aforementioned areas. I dealt with high volumes of work and ever changing priorities, making this very challenging and demanding work.The ICT and Information Security side of the role involves setting policies and procedures, managing compliance with ISO27001, PSN, NHS Toolkit and overseeing the implementation of security principles and policies by all staff and our partner BT South Tyneside. This can be operational issues, new ICT initiatives, compliance with standards and procurements as well as delivering training, guidance and incident and risk management services.My team also dealt with all information requests under Data Protection, Freedom of Information and Environmental Information Regulations, DBS Service requests and Police Annex C Child Abuse Enquiries. I also managed the Archived Records Store for the Council as well as the in house courier service.I provided Information Governance and Security consultancy for the Local Authority, BT South Tyneside and South Tyneside Homes; as well as representing the Authority on projects with partners such as the NHS.

This role is an extension of my previous role but incorporating Freedom of Information, Data Protection, Records Management as well as ICT & Information Security.

ICT & Information Security Officer for the Council responsible for advising on information security matters, setting policy, delivering awareness, Disaster Recovery coordination, Project consultancy, Access Control guidance, Data security consultancy etc.

This role was working in the Information security which included developing policies, providing security consultancy on ICT projects, developing the Intranet and Information Security training and awareness, Monitoring system compliance, user administration on some systems, management of anti virus software implementation, incident investigation and Information Security research. I also trained other junior members of staff in the team.