• Build and lead a team of security engineers, analysts, and GRC consultants to secure a multi-billion dollar payments platform. • Create an Identity and Access Management framework including designing a Role Based Access model for corporate, payment systems and cloud environments.• Act as a Subject Matter Expert to the business on payments card industry security and compliance.• Promote DevSecOps practices by raising awareness of secure coding, correct use of cryptography, and best practice in secure CI/CD.• Manage resources to control cyber security risks within company risk and budgetary tolerances.

• Operationalise an Information Security program based on the NIST Cyber Security Framework and report regularly on posture.• Lead the GDPR, HKMA CRAF & PCI DSS programs. • Build and manage a vulnerability management program to reduce threat exposure.• Build a security-aware culture through training, gamification, and impactful communications.• Improve the security operations function to detect and respond to threats.

• Manage a team of cyber security consultants on a day to day basis to enable effective resourcing for projects.• Manage parallel projects to deliver high quality outcomes on-time and on-budget. • Conduct business development activities to develop a pipeline and establish relationships within government departments. • Deliver no-nonsense security advisory to government clients.• Authored a report examining economic impacts on the critical infrastructure industry based on a changing cyber security landscape.

• Lead cyber advisory engagements to produce high quality deliverables to influence senior executive decision making. • Conduct internal audits of significant government cyber security projects and programs.• Attend Risk & Audit Committees on behalf of EY to deliver audit reports. • Conduct Privacy Risk Assessments for clients undertaking new data processing activities.• Conduct cyber security program maturity assessments of large educational and government clients.