• Responsible for the management and delivery of the Group Data Protection and Privacy Framework across multiple jurisdictions.• Implemented training and awareness program using MetaCompliance learning management system• Undertake ISO 27001 internal audits for certified business units • Support implementation of ISO 27001 • Enforcing data protection risk and governance measures and procedures using One Trust • Implemented the Privacy Engineering initiative to translate data protection obligations and privacy implications into software requirements• Drive the concept of data protection by design and by default• Implemented information security and data protection risk management strategy • Developed Privacy Risk Model, a process involving the identification privacy threats, vulnerabilities and risks• Drafting, reviewing and updating data protection and information security policies • Conduct reviews and propose amendments to contracts and data processing agreements• Ongoing monitoring and review of data protection and information security compliance across all business units • Ongoing monitoring of changes to data protection and e-privacy regulations and developments from regulatory bodies• Implementation of Incident Response Plan • Provide advice and guidance to all levels of the business on data protection laws, compliance and best practice • Lead technical security reviews and assessments with external consultants • Conduct and monitor vendor due diligence as part of the third party risk management strategy

Implementing ISO 27001 Information Security Management System Implementating of BS 10012 Personal Information Management System (Aligned with GDPR)Cyber Essentials certificationChampion data protection by design and default Conducting data protection impact assessments and information risk assessmentsManagement of Information and Privacy Risk RegisterDesigned and deliver data protection and information security role based training GDPR compliance reportingDrafting and implementing data protection/privacy and information security policiesMapping data flowsDocumenting data processing activities (Article 30-GDPR)Reviewing client terms and conditions and data processing agreementsAdvising on PECR compliance Evaluation of performance and define measures for continuous improvementManage subject access requests and other requests

EU General Data Protection Regulation Practitioner (EU GDPR P) GDPR - GAP Analysis and Implementation Project• Mapping data flows with key business stakeholders• Mapping international data transfers • Identifying data processing activities across the business by working with key stakeholders• Documenting data processing activities in conjunction with Article 30 of GDPR• Conducting risk assessments as part of the GDPR GAP Analysis• Driving strategic direction for the Project Team and identifying key priority areas• Creation of policies and privacy notices• Implementation of Privacy by Design • Conducting regular data protection impact assessments for current projects• Holding regular GDPR awareness sessions across the business• Development of Legitimate Interests Assessment process• Supporting day to day business operations by providing advice, guidance and training on regulatory and commercial matters in relation to the Data Protection Act (1998)

Management of Compliance TeamDesign of Governance, Risk and Compliance Framework outlining responsibilities and accountabilities with Stakeholders, identifying regulatory and commercial risks and compliance obligationsDesign and development of global risk management plan Analysis of exception reports in alignment with defined tolerances and escalation mechanismsEvaluation of performance and define measures for continuous improvementContribution to the Contract Review Board to evaluate commercial and operational viability and assessing risks of entering into new client agreements

Analysis and development of contractor retention strategies.

Research into international compliant contractor payroll and visa servicesDevelopment of company’s client and contractor terms & conditionsSecured membership with FPAL/Achilles compliance sitesCommercial and compliance analysis of client terms and conditions for both Agrand and Oliver James Associates Contract negotiation with clients regarding clauses commercially and operationally unviable Detailed analysis of front and back office processes, with the objective of improving speed, efficiency and eradicating errors

Responsible for contracts analysis, outlining commercial and operational impacts.Development of operating guidelines for global contracts which were disseminated to international locations and supported the implementation of contractual compliance proceduresActivities included the identification of;Cost and commercial implications contained in contractual clausesFlow down items for replication into contractor contractsCosts/burdens to incorporate into pricing modelsFactors which erode profit marginsCompliance obligationsStandard terms of business (payment terms, contract currency etc.)Contractual risks (Penalties, indemnities, KPI's)

Responsible for managing a Business Unit dedicated to sourcing Contract Personnel to Kashagan Project.

Responsible for managing Agip KCO account.

Focussing on overseas recruitment for Oil & Gas Operators.