Managing Consultant role, working predominantly on privacy transformation and consulting in cross industry sectors.

At NCC Group, I was an Information Security Consultant within the Privacy Practice. I was responsible for managing client relations, developing new opportunities in work streams, managing engagements from PID to delivery and budget management. I was also expected to QA for my peers and represent NCC at public and sector specific engagements. My primary areas of delivery were:ISO27001 - Readiness/gap and implementationCyber Security - Gap analysis and recommendationsData Protection Act 1998 - Compliance assessments and implementationGeneral Data Protection Regulations - Gap analysis and implementationRisk Management Records ManagementGovernanceSecurity TrainingData Discovery /MappingMy work is not sector limited, I have worked with organisations in a variety of industries both in the private and public sector.

Lead a team of auditors to plan and conduct compliance audits of information security, training and awareness, records management, subject access and data sharing. Conduct mandatory compliance audits in line with Information Commissioner’s enforcement powers. Conduct Information Risk Reviews of organisations deemed to be at risk of a data protection incident. Carry out informal advisory visits at SMEs to promote good practice in data handling and information security.Compile detailed findings and recommendation reports on all audit activities.Produce and communicate executive summaries on relevant audit activities. Liaise with internal stakeholders to scope out potential risk areas when preparing for an audit, and to identify opportunities to promote compliance with information security standards in specific sectors.Keep abreast of sectoral trends and developments in information security and data handling practices.Develop, present and facilitate at information security workshops across the country, targeting specific sectors.

Investigate serious breaches of the Data Protection Act.Communicate with Chief Executives and senior policy makers of external organisations to ensure regulatory matters receive the highest level of attention and sign-off. Compile investigation reports which inform ICO Lawyers, management, senior management, and the Information Commissioner of investigations and associated outcomes.Develop internal relationships with key stakeholders.Through the investigation process, identify new and emerging privacy risks.Develop remedial action plans to help organisation recover and develop following a breach of privacy legislation.Negotiate with external stakeholders in order to achieve compliance with privacy rules.Develop guidance on internal procedures for use across the ICO.Risk assess and prioritise new breach reports from third parties.Deliver training on data protection for staff across the ICO.Mentor new staff on relevant legislation, policy and procedure.