At GByte Consulting, we offer a comprehensive array of services designed to meet diverse business needs. These include risk identification, risk mitigation, control design, and compliance auditing. Our expertise spans across various industries, enabling us to assist businesses in achieving their goals effectively and efficiently.

1. AUDIT LEADERSHIP: • Demonstrated success in overseeing and managing end-to-end audit processes, from planning to execution, ensuring accuracy and adherence to audit standards. Proven ability to lead and inspire teams to achieve excellence in audit performance.2. REGULATORY COMPLIANCE: • Expertise in interpreting and applying complex regulatory requirements to audit processes, ensuring clients' compliance with industry standards and legal obligations.3. RISK MANAGEMENT: • Proficient in identifying, assessing, and mitigating financial and operational risks. Skilled in developing risk-based audit plans to address key areas of concern and improve overall risk management strategies.4. STAKEHOLDER ENGAGEMENT: • Adept at building and maintaining strong relationships with clients, regulators, and internal stakeholders. Proven ability to communicate complex audit findings in a clear and concise manner, fostering trust and collaboration.5. PROCESS IMPROVEMENT: • Successful track record of implementing process enhancements to optimize audit efficiency and effectiveness. Skilled in leveraging technology and data analytics to drive continuous improvement in audit methodologies.6. TEAM DEVELOPMENT:• Proven leadership in recruiting, training, and developing high-performing audit teams. Strong mentorship and coaching skills to foster professional growth and enhance team capabilities.

1. INFORMATION SECURITY AND GOVERNANCE:• Spearheaded the development and execution of enterprise-wide Information Security strategies, ensuring alignment with business goals and regulatory requirements.• Established and maintained effective governance frameworks, policies, and procedures to mitigate risks and enhance overall security posture.2. RISK MANAGEMENT AND COMPLIANCE:• Led risk assessments to identify and prioritise vulnerabilities, implementing measures to mitigate potential threats.• Ensured compliance with industry standards (ISO, PCI-DSS, GDPR, etc.) and regulatory requirements, fostering a culture of continuous improvement.3. INCIDENT RESPONSE AND CRISIS MANAGEMENT:• Orchestrated incident response plans, successfully mitigating Information Security incidents and minimizing potential damage.• Implemented proactive measures to enhance the organisation's resilience to cyber threats and developed robust crisis management protocols.4. EMPLOYEE TRAINING AND AWARENESS:• Developed and executed comprehensive Information Security awareness programs, ensuring all employees understand their role in maintaining a secure environment.• Conducted regular training sessions to keep staff informed about the latest cyber threats and best practices.5. COLLABORATION AND STAKEHOLDER MANAGEMENT:• Established strong cross-functional collaborations with IT, legal, and business units to integrate security into all aspects of the organisation.• Effectively communicated complex security concepts to non-technical stakeholders, garnering support for security initiatives.6. PROFESSIONAL DEVELOPMENT AND THOUGHT LEADERSHIP:• Stayed abreast of industry trends, emerging threats, and best practices through continuous learning and participation in relevant forums.• Actively contributed to the cybersecurity community through thought leadership, speaking engagements, and publications.

• Elevated the need for Information Security into the boardroom and integration earlier in business process • Defined overall strategy and gained board approval.• Worked in harmony with compliance team; defined and transitioned BAU activities.• Conceived PCI environment and scope and drove through to adoption and certification • Provided information security consultancy to Webhelp teams and clients •Monitor developments in information security related technologies and best practice.• Regularly contributed to internal and external audit teams.• Adapted processes arising from company mergers and acquisitions, ensuring that information security is maintained throughout.• Communicated security strategy, policy, position and risk at all levels from operational floor to board room• Worked with internal teams to ensure information security standards are maintained, understood and repeatable across, audit, risk, IT and operational functions.• Education and buy-in from all employees to ensure understanding of information security resulting in heightened awareness.• Maintained Information Security Risk and Asset register and ensure alignment with business goals and objectives.• Implemented processes in alignment with the Deming cycle, (Plan, Do, Check, Act).

01/2003 to 03/2006 Server Manager 01/2002 to 12/2002 Desktop Manager 01/2000 to 12/2001 IT Support Analyst 05/1996 to 01/2000 Team Leader

Alongside the Information Security role, additionally manage the implementation of network infrastructure solutions to support client contact centres.• Liaised with 3rd-parties and contractors to implement a range of technical solutions based on client-specific requirements.• Architected a number of technical designs which enabled cost-savings and improved stability and performance for clients. This included an MPLS WAN rollout and an E-LAN implementation.• Managed several end-to-end network implementations, including a large new-build contact centre facility in India and a network infrastructure upgrade at a contact centre for a global media company.• Defined the business case and implemented a 3-year hardware refresh cycle for desktops and servers; this increased standardisation, licensing compliancy and application availability.• Worked in line with change management, incident management and risk management procedures to ensure all implementations were managed appropriately.• Part of the technology management team responsible for IT strategy and development of the IT budget.• Managed projects using the in-house project methodology, ensuring documentation deliverables were in place and changes were managed in accordance with policies. • Managed project budgets and plans; liaised with a wide range of stakeholders.• Defined and implemented a standard approach to incident management; acted as a point of escalation for major incidents.