Providing strategic security guidance, risk management and compliance, and building solutions to protect Assured and its customers to enhance resilience, and drive growth

Information Security Manager, Security Architect, application security, SecOps lead, business continuity manager Alongside BAU staff security and privacy advice/guidance and incident response, delivered or delivering:Vulnerability management solutionStaff behavioural programme Threat intelligence Data loss protection for privacy and IPUSB device control Phish alert in email, integrated with automated spam handling and threat containmentOpen source SCA and SAST in secure application pipelineISO 22301 certification Product security programmeEnd user device benchmarking Active directory hardeningThreat hunting capability Risk management methodology Supply chain risk process

Leader of cyber risk and data privacy services for education and digital publisher of 33 sites worldwide, 6000 staff and $1Bn turnover. Acheivements:• Cyber threat landscape, vision and mission defined to inform strategy: 4 weeks• Risk management strategy and framework designed: 6 weeks• Continuous monitoring website vulnerabilities scanner in use for 200+ websites: 2 months• iisp skills matrix application: 3 months• Leadership and management seminars delivered to team weekly: 3 months• Exec dashboard of KRI/KPIs• New data classifications designed and delivered: 5 months• SbD/PbD ways of working and security requirements (plus stories) designed and built into SDLC: 5 months• Phishing alert button rolled out: 8 months • ISMS design completed: 9 months• DAST tool delivered for dev' and prod' and integrated into DevOps: 9 months• Risk management working: 9 months• 10 x new standards and ISO27001/NIST 800-53 controls complete and rolled out: 9 months• Awareness security behavioural campaign live: 10 months

Designed and delivered cyber security governance, risk and compliance (GRC) processes and technologies for operational technology comprising of over 600 separate sites globally, with a multitude of business objectives.Delivered first worldwide information security regulation management (from GDPR to FISMA) and 2nd line assurance from scratch, to global business of $3.2Bn turnover operating in a complex environment.

Cyber security risk management for IT and OT, across the the Royal Air Force's UK and deployed locations.