Colin M. Email & Phone Number

Responsible for the rescue/recovery of the Halfords Identity Access Management Programme to mitigate audit risks. I am also delivering Single Sign On & BYOD across Halfords and Halfords Autocentres. ➤Delivery IAM infrastructure, data cleansing➤Setting up a BAU Identity Governance Administration (IGA) service➤Delivery of SSO across critical systems➤Scoping, planning and delivery of BYOD ➤Drafting of associated processes and procedures ensuring alignment of critical systems and Identities ➤Change management across 10,000 users

United Kingdom | International

Consultancy services, specialising in the end-to-end delivery of programmes, cyber risk assessment. business and digital transformation.➤Strategic, innovative and commercially-astute, project turnaround and programme.➤Acts as a ‘trusted partner’ to the business, bridging the gap between delivery & wider business needs, engages & influences ‘C-level’ executives, takes ownership of complex programmes/projects ensuring successful business change in line with agreed objectives, time, cost and quality parameters.➤Strong analytical skills, enthusiastic about new ways of working through the adoption of innovative new processes and solutions, championing the change agenda.➤Collaborative approach to successful transformational leadership, working with stakeholders at C-level / Board, shop floor and 3rd parties. ➤People-centric & inspiring as a Business Leader, leveraging an open, collaborative, and positive leadership style. Mentoring is a default and enjoyable activity. ➤Excels in high pressure, complex & ambiguous environments, using problem solving skills at all levels. Recent engagements included:➤ Scoping and delivery of Identity Access Management➤ Delivery of ISO27001 ISMS➤ Full business process review, re-engineering, governance and delivery (including ITSM)➤ Developed and embedded collaborative environments based on the Microsoft stack➤ Delivered the Modern Workplace Desktop within the EU & Globally (M365/End Point Manager/In Tune)➤ Successfully delivered multiple upgrades or replacement of business critical infrastructure➤ Delivery of Security information and event management (SIEM) & DLP configurations➤ Developed and embedded Governance models (including change control, project boards, escalation routes) reporting into the CEO, CIO and/or IT Director➤ Change, cost, scope & quality management applied to all deliverables ensuring successful deliveries*Please note this is my company*

Remote

To review & streamline existing working practices & improve ROI. Complete a cyber security audit using the NIST framework to assess cyber risks and improve organisational resilience.- Business strategy alignment and re-alignment of ways of working- Development and implementation of a new Target Operating Model (TOM)- Cyber risk assessment using the NIST framework- Development of strategies and processes to enhance resilience to meet DORA guidelines

London, England, United Kingdom

Led the Governance, Risk, and Compliance (GRC) initiatives within the IAM/PAM projects, ensuring alignment with the NIST ‘Protect’ risk mitigation framework. Key contributions: ➤ Delivered Identity and Access Management (IAM) across the Royal Mail - SailPoint➤ Developed key relationships with senior business stakeholders to assist in the delivery➤ Matrix management of the IAM, PAM, Test, Architecture and Service Management teams to maintain programme support & progress ➤ Prioritised alignment of deliverables to support the Cyber Security risk matrix & NIST➤ Configuration & delivery of SailPoint Identity Access Management (IAM) SAAS ➤ On-boarding of test applications into IAM➤ Business process re engineering to embed new processes➤ Review and automation of processes to improve ROI ➤ Scoping & shaping the delivery of a Privileged Access Management (PAM) platform ➤ Developed organisational Stakeholder Matrix and Communications Plans to support ongoing assessment of change adoption & benefits realisation,Skills: Programme Delivery · Stakeholder Management · Programme Governance · Strategic Planning · Project Delivery · Change Management · Digital Transformation · Change Management · Business Process Improvement · IT Project & Program Management

London/Remote

Focused on Governance, Risk, and Compliance (GRC) activities to develop the Portfolio. Managed strategic business changes to enhance continuous improvement and mitigate risks in line with strategic priorities. Responsible for all aspects of the M365 Portfolio of business change initiatives across the end user M365 platform, driving strategic conversations to business change methodologies and strategies.Key contributions and successes:➤ Evergreen change management planning, reporting, capacity & risk management, ➤ Risk and Compliance Management: Successfully scaled a dedicated M365 PMO, implemented robust processes for governance, risk and budget management, developed change readiness, capacity and continuous assessment of compliance and risk mitigation,➤ Security and Compliance Delivery: Successfully implemented critical, Microsoft security changes within 6 weeks, ensuring security standards compliance,➤ Continuous Improvement: Led evergreen change management, planning, reporting, and risk management processes ensuring compliance,➤ Continued development of the M365 portfolio of work, Terms of Reference, team structure & budget to meet changing organisational and Microsoft platform requirements,➤ Portfolio pipeline planning, reporting, capacity & risk management,➤ Delivery, business change and implementation of an organisation wide staff engagement platform and supporting Groups security model,➤ Stakeholder Engagement/ Collaboration: Cultivated strong relationships with stakeholders, created and managed stakeholder matrix and communications plans to support targeted upskilling enhancing GRC capabilities, and ongoing assessment of change adoption,Skills: Programme Delivery · Stakeholder Management · Programme Governance · Strategic Planning · Project Delivery · Change Management · Digital Transformation

London, England, United Kingdom

Responsible for all aspects of change, project leadership and delivery, instrumental in supporting the already ‘in-flight’ procurement of the new SaaS service mitigating high procurement risks to avoid legal challenge.Focused on Governance, Risk, and Compliance (GRC) activities, ensuring all projects adhered to legal and regulatory standards.➤ Full remit for the procurement and delivery of a SaaS product that will be used as a springboard to modernise the existing working practices that will support recruitment, on-boarding and retention. ➤ Contract and Service Transition: Transitioned contracts, applications, and support services between UK government organisations, ensuring compliance with all ITIL and regulatory requirements, ➤ Managed the migration of 30 applications and associated ITSM services to ensure consistent support during a period of change within the organisation and improved accountability through standardisation.➤ Risk Mitigation: Instrumental in avoiding legal challenges through rigorous GRC processes, ➤ Procurement Compliance: Successfully reviewed and re-drafted procurement documentation to meet GCloud and legal guidelines,

London, England, United Kingdom

Responsible for all aspects of programme leadership, strategic organisational change and delivery, completing a restructure and turnaround of a previously failing global programme delivery. Focused on Governance, Risk, and Compliance (GRC) activities supporting the delivery of a global, remotely managed, secure desktop to merge two organisations, ensuring robust security, governance and risk management practices.➤ Led the implementation of £35M global delivery programme, as part of a UK Government agenda to consolidate legacy solutions & streamline processes, enabling work across 200+ locations whilst dealing the challenges of Covid.➤ Stakeholder Engagement: Led strategic conversations with stakeholders to secure approval for a new Target Operating Model (TOM) ensuring compliance with governance frameworks,➤ Process Development: Created new processes for the integration of IT teams following the merger of two organisations, ensuring compliance with governance and security standards.➤ Risk Management: Identified and mitigated risks associated with the £35m global programme, implementing Zero Trust Architecture requirements, conducting regular risk assessments to ensure compliance, secured Windows 10 devices with supporting Cloud platforms necessary to enable the global workforce.➤ Cyber Risk Management: Delivered a EUC pilot to a select global audience-rated 4.5 of 5 by respondents, migrated applications to meet Zero Trust architecture guidelines,➤ Embedded full governance where non existed, change control, wrote service desk scripts, delivered UAT in addition to managing security assurance to facilitate deployment into live.➤ Automation and Efficiency: Automated a series of services using the Microsoft stack, enhancing compliance tracking and reporting capabilities,

London, England Metropolitan Area

Appointed as Senior Project Manager to lead and support an ‘in-flight’ procurement initiative within the MoJ, responsible for all aspects of project change and delivery on a major budget initiative, impacting 30,000 people across 500 UK locations. ➤ Managed the end-to-end procurement of a new supplier for a major, high value contract (bids, evaluation, moderation and contract award), including planning, delivery and removal of the print fleet,➤ Additionally, set up a project and associated governance for a high profile infrastructure renewal, supporting the delivery of sensitive data 'lift and shift' from multiple DC's,➤ Major project rated as ‘excelling’ by Cabinet Office Audit, one of only 7% to achieve a ‘green’ status throughout UK Government,➤ Stakeholder Engagement: Extensive stakeholder engagement and training programs modernising existing working practices, reducing waste,

London, England Metropolitan Area

Supported Governance, Risk, and Compliance (GRC) activities to deliver ISO27001, ‘fit for purpose’ governance frameworks, risk management practices, and compliance standards were established.➤ Spearheaded the successful management of 25 security projects delivered across 20 global locations, supporting the team with supplier selection, management and work packages,➤ Risk Management: Conducted comprehensive risk assessments with the CISO/CIO, developed mitigation's addressing identified risks, embedded continuous monitoring and improvement,➤ ISO27001 ISMS Implementation: Led the successful delivery of an ISO27001 Information Security Management System (ISMS) global programme, covering 25+ security projects,➤ Governance Framework: Established and embedded a fit-for-purpose governance structure and practices to ensure compliance with ISO27001 standards,➤ Project Realignment: Redrafted and refocused project objectives to achieve realistic targets within the available time and budget constraints, aligning with governance and compliance goals.

Bristol, United Kingdom

Governance, Risk, and Compliance (GRC) programme to drive improved security posture, digital transformation and business process re-engineering. Responsible for all aspects of change management, coaching, training, programme leadership and delivery, taking the organisation through a full digital transformation.➤ Cyber & Risk Management: Planned, and delivered complex, large-scale organisational change across the EU, implemented a Security Information and Event Management reducing Cyber risks,➤ Compliance and Audit: Upgraded or replaced legacy equipment throughout European offices, ensuring all upgrades met compliance and security standards,➤ Scoped, planned & delivered complex, large scale organisational change,➤ Upgraded or replaced legacy equipment throughout the European offices, embedding new process, coaching and support of EU wide users, ➤ Programme Management: Managed multiple projects-WAN, LAN, M365 configuration, BB to Android upgrade, PowerBI, and migration of selected apps to Azure, aligning with GRC frameworks, ➤ Procurement & vendor management: Procured multiple products, managed vendor engagement, planning, configuration, testing, delivery, benefits appraisal and project closure, ➤ Stakeholder Engagement & Change Management: Developed a stakeholder matrix, communications plans and Change Champions network. Delivered change readiness plans with ongoing assessments meeting the evolving learning needs of the organisation,➤ Supported BAU operations whilst delivering digital transformation via matrix management of staff.➤ Designed and embedded change management, new business workflows and ITIL processes

London & Nationwide

Project & programme management, Procurement and Contract Management, driving high-profile change initiatives and business transformation.➤ Full project and programme lifecycle control, with budgets ranging from £1m to £10m+, impacting up to 23,000 users across 150-200 UK locations, whilst managing a team of 30-50 resources.➤ Risk Management: Identified, assessed, and mitigated risks throughout the project lifecycle, ensuring project and programme objectives were met securely and efficiently,➤ Managed merger journeys brought about by joining three organisations into a single structure, enabling business transformation and transition to a new Target Operating Model (TOM).➤ Budgetary Control: Managed project and programme budgets ranging from £1m to £10m+, impacting up to 23,000 users across 150-200 UK locations,➤ Procurement & contract management: managed high value contracts with Microsoft, Oracle & IBM in addition to strategic procurement's,➤ Leadership, management and motivation of teams up 50, including direct and matrix,➤ Managed merger journeys brought about by joining three organisations into a single structure,➤ Connectivity Transformation: Improved connectivity and operational efficiency through the delivery of Cloud-based connectivity-SD-WAN, (40GB circuits, new WAFs, re-routing and back hauling data to ensure security) and Identity Access Management, ➤ Security Testing/Remediation: Managed, prioritised risks, agreed budgets and remediated insecure infrastructure following the annual penetration testing, ➤ Mentoring and Staff Management: Alignment of major programme & BAU teams supporting major business change.➤ Promoted positive working relationships with numerous large-scale vendors, ensuring maximum goodwill and flexibility in working practices to resolve ‘in flight’ issues.

London, United Kingdom

Responsible for all aspects of procurement and contracts management, lead Contract Manager, instrumental in the procurement, negotiation, compliance with Enterprise Level Agreements.➤ Sourced and delivered the introduction of the first pan-Government Ariel photography contract encompassing the Police, MoD and other Central Government customers, saving in excess of £5M. ➤ Acted as the Lead Contract Manager, instrumental in the procurement, negotiation, compliance of Enterprise Level Agreements, including working closely with Microsoft, ESRI and Oracle.➤ Contract Management of the Service Integrator (IBM) 8-year contract including negotiation of changes notes, contract/project charges, SLA monitoring, re-drafting of the contract as required.➤ Procurement of other IT systems/software as required to meet changing business needs.

York, England, United Kingdom

Post-relocation from London to the Northern areas of the UK, appointed to set up all procedures and processes along with the cleansing, migration and consolidation of the property database.➤ Delivered, configured and migrated property data to a new Pan-Defra property database.➤ Re-drafted all operating procedures to meet the new Pan-Defra shared property operating model.➤ Migrated refreshed data to the Pan-Government property database (ePims).➤ Managed the rent roll and payments across the property portfolio using Oracle and ePims.