✔️Led on planning, auditing and meetings for core subject inspection of a 450 pupil school by Ofsted which helped achieve a ‘Good’ overall inspection rating.✔️Created action plans and continuously monitored them to work to deadlines, demonstrating high level of organisational skills and contributing to a ‘Good’ rating from Ofsted.✔️Daily writing of lessons and reports for a variety of stakeholders.✔️In charge of teaching 25-33 Year 6 pupils, and mentored a newly qualified Year 6 teacher for 18 months, who is now successfully teaching in Year 6.✔️Created a series of 6 different 2 hour workshops including resources, and delivered the training to upskill 10 external stakeholders in Computing algorithms and programming. This work demonstrated my collaboration and communication skills and received 100% positive written feedback.

Projects: ✔️ Splunk – Utilised commands to query data and created different visualisation dashboards.✔️ Sentinel: Created watchlists, threat indicators, configured log retention, ran hunt queries, configured UEBA.✔️ Wireshark – Used filters to focus on specific IP addresses and protocols and looked for malicious string and data. ✔️ Datacom Cybersecurity Job Simulation on Forage • Investigated a cyberattack and produced a comprehensive report documenting findings and outlining key recommendations to improve a client's cybersecurity posture.• Conducted a comprehensive risk assessment.✔️ Cybersecurity Evaluation Tool (CSET)/NIST Cybersecurity Framework (CSF) SimulationUsed CSET to evaluate a company’s strengths, weaknesses and overall security posture using the controls from NIST CSF. With the tool, I created a compliance summary, variance statistics, areas of concern and security recommendations.✔️ Microsoft Purview / Compliance ManagerUsed Purview and compliance manager to improve overall compliance score and overall compliance posture.Self-Study:✔️ Cisco Cyber Ops Associate Curriculum - the knowledge and skills that Security Operations Centre (SOC) teams need to detect and respond to cybersecurity threats. Knowledge of associate-level cybersecurity operations including security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.✔️ Google Associate Cloud Engineer Learning Certification Path - involves hands-on labs and weekly time commitment. ✔️ Vulnerability Management and Scanning, Detection and Response, and Patch Management (Qualys).✔️ Linux (Cisco NDG certification)

✔️Award-winning workplace readiness and certification training programme. Now certified CompTIA Security+ and CompTIA CySA+ certified!✔️Many labs undertaken as part of the training.Example labs:✔️ https://github.com/mdnorris1/HardeningAuthentication- Hardening authentication: increased the authentication security of the domain.✔️ https://github.com/mdnorris1/FirewallLab - Configure the perimeter firewall on the network security appliance (pfSense) to allow access from the WAN to the Web server in the DMZ using both HTTP and HTTPs. You also want to allow all traffic from the LAN network to the DMZ network.✔️https://github.com/mdnorris1/ActiveDirectoryLabs - Created an Active Directory organizational unit (OU) structure based on the company's departmental structure and ensured that each is protected from accidental deletion.

Intensive cyber security training & workplace readiness programme. Solving real problems in the areas of;✔️ Cyber Security Culture & Awareness✔️ Use of MS 365 security suite including Sentinel, Defender for Endpoint, Entra ID (Azure) and Purview ✔️ Access Control✔️ Networking Security Fundamentals✔️ Cloud Computing (especially Microsoft Azure)✔️ Business Continuity & Incident Response✔️ Governance, Risk and ComplianceCertifications awarded:✔️ British Computer Society's Certificate in Information Security Management Principles (BCS CISMP)✔️ Microsoft Security, Compliance and Identity Fundamentals Certification (Microsoft SC-900)✔️.CertNexus CyberSAFE Certification

French/English IT Analyst ✔️ Generated solutions quicker by working collaboratively with IT teams, saving valuable time for the client in waiting for escalation processes. ✔️ Implemented known fixes, addressing vulnerabilities.✔️ Wrote accurate and concise incident details to reduce time needed to resolve incident. ✔️ Ensured accurate user account administration.✔️ Improved the security awareness of stakeholders via phone.