Control Solutions and Monitoring, responsible for SOC 2 and ISAE 3000 control compliance for Mastercard's global real-time payments services.

I led the delivery of a portfolio of technology risk projects, including managing timelines and budgets, coaching team members, and ensuring the quality of deliverables. I was also responsible for maintaining relationships with key stakeholders to ensure that their expectations were understood and met. Notable contributions include:● Led the scoping, delivery, and reporting of ten co-sourced internal audits, including presenting findings to senior leadership and audit and risk committees. Subject matters included cybersecurity controls (NIST CSF, ACSC Essential 8), cloud governance, IT service provider risk, information management, and disaster recovery.● Planned and delivered a five-year internal audit plan for a global SaaS fintech company. The audit plan comprised 19 reviews encompassing ISO 27001 control implementation in an AWS cloud environment to support certification readiness.● Completed a six-month secondment as an Information Security Manager to support the implementation of the NIST cybersecurity framework. This role included drafting security policies and procedures, preparing business continuity plans, and providing training to client staff and management.● Evaluated business process models to identify key risks and support the development of over 100 to-be-built control designs for a £66 million digital transformation programme.● Selected for PwC’s generative artificial intelligence pilot programme to explore use-cases, test global internal GenAI tools, and deliver internal training on the opportunities and risks of GenAI.● Organised 40+ ‘Lunch and Learn’ training sessions and developed a cross-specialisation training plan as the national learning and development champion for the Cyber and Digital Trust team.

● Executed and reported on 12 internal audit assessments relating to cybersecurity controls (NIST CSF, NZISM), cybersecurity culture, system and data migration, IT asset management, and risk management.● Supported the development of technology risk management frameworks, prepared associated technology and cybersecurity policies suites, and created PowerBI risk profile monitoring dashboards.● Prepared business process architecture models and performed IT service mapping to support the prioritisation of a cyber-incident recovery programme.

● Performed assessments over the design and operating effectiveness of IT general controls, including access management, software development lifecycles, data backups, and automated system controls for ISAE 3402, SAE 3150, and financial statement audits for fund managers and a central bank.

● Digital Strategy (INFO354)● Database Management (INFO151)● Systems Analysis (INFO141)● Introduction to Information Systems (INFO101)

● Agile Application Development (INFO226)● Database Management (INFO151)