An enthusiastic and experienced information security professional, I have over 25 years experience in information security management, information assurance, and protective security. I have in-depth knowledge and extensive practical experience of information security gained from roles as a consultant, Information Security Officer and in the military; and a record of success in a wide range of consulting roles, across both the public and private sectors, helping clients identify, understand, and address information security threats and implement pragmatic, risk informed security solutions.Specialities:• Information Security Strategy definition • Information Security Programme development• Information security management and management systems• Threat assessment and risk assessment• Information security maturity assessments and roadmap /improvement plan development• Risk management• Information security methodologies and frameworks, including ISO 27001 & 27005, NIST, CIS • Governance and CISO advisory