Successfully delivered a compliance strategy for this clinical trials company. Enabling a clear path from basic cyber resilience through Cyber Essentials, IASME and ISO27001

Performed the role of DPO (data protection officer) providing regular updates to the Board and successfully defending two cases (data breach and SAR Complaint) via the ICO (Information Commissioners Office).Successfully delivered a Global Data Privacy Programme including policy development, Article 30 Records, associated guides and standards. A particular emphasis on marketing restrictions and e-Privacy (PECR - Privacy and Electronic Communications Regulation) plus “in country" laws (such as employment laws in France) and legislation across EMEA and ASIAPAC.Created a best in class PMO Process (Virtual PMO) that integrated compliance checks on projects prior to funding thus protecting any investment in new projects and guaranteeing a successful, compliant delivery. Provided WD40 Company with a complete set of Policies compliant with GDPR and DPA 2018. Furthermore, assisted Global WD40 Companies and Agents with the same level of documentation and support.Delivered a Data Privacy programme of education to the Leadership Team and to Sales and Support services in UK, France, Germany, Netherlands, Spain, Italy and USA.Implemented CIS (Centre for internet security) Controls for Cyber Security to demonstrate a responsible approach to cyber defences in what was becoming a largely digital marketing effort..The Data Privacy programme above was delivered with an eye on Brexit and the possible impact associated with leaving.

Programme Manager with the Legal and Compliance function of Bayer Pharmaceuticals with responsibility for delivering the Data Privacy programme. Worked closely with a team of 6 Lawyers to support lines of business across the organisation. Accountable to head of Legal and DPO advising him on Data Privacy and associated Regulations (DPA,GDPR,PECR).Created and managed the Programme Plan, executed formal gap analysis and then adapted / updated existing policies, standards and associated documentation to a compliant level and provided documentation to support Article 30 records.Provided training for junior lawyers on data privacy regulations and developed a training programme for Bayer (UK & Ireland) PLC..Provided training, guidance and support to Bayer customers (NHS GP Surgeries and Veterinary Practices) on data privacy matters.Delivered a “Consent Management Strategy” focussed on web microsite construction to obtain marketing consent both pre and post May 2018. This was deemed very successful and ensured Bayer’s continuing direct marketing ability going forward from both Privacy and ABPI Code perspectives. Implemented DLP (Data Loss Prevention) to ensure that Bayer’s (UK & Ireland) information holdings were current and legal, removing personal information that was no longer required. Bayer were buying Monsanto at the time and Symantec and McAfee were used by each company with a view to subsequent selection of the preferred application.

Supported the Organisational Development Executive in developing a strategy for information and knowledge management in order to assist in compliance with the 36 Licence conditions that are needed for Horizon to become a nuclear site licence operator. Provided expertise in document control and records management, In addition, fulfilling the temporary role of DCRM Manager and mentoring direct reports in information management and security. As strategy lead, advised on HR Resource Model requirements, information capture for knowledge systems and how to create a “learning organisation”.

The MoJ are transforming Rehabilitation of offenders by opening up the market for rehabilitation providers to public, voluntary and private sectors. The MoJ were receiving bids during the above period and each bid needed to be evaluated against a set of criteria. I was one of the evaluation team focussing on information management, security and communications. The bids had to be examined to ensure that proposals for networks (LAN / WAN) were adequate. Further work included the early design of a transition template which would assist the private companies in their move to take over the service from the MoJ.

Provision of Resource Modelling and Capacity Management expertise. Design and development of a new target operating model for the organisation based on 3 year transformational stages starting April 2015 and going through to April 2021 and beyond.

BG Group are constantly looking for ways to improve internal processes and consequently drive down costs. Analysis and design of processes for improved operation between departments providing clarity, understanding and subsequent improvements in process times. Exposure to UK Upstream Oil and Gas Operations. Contracted to lead on a 3 year plan for data management and storage strategy to improve data management standards in accordance with BG Group enterprise architecture.