- Own, drive and manage all aspects of Information Security management for the Organisation- Plan, prepare, socialise, implement and measure cyber business strategies across the Organisation- Serve as the Cyber Trusted Partner for the Organisation - Own and Program Manage multiple Cyber Uplift programs and Event Assurance program for the Elections delivery- Facilitate collaborative engagements with multiple State and Federal agencies - Grow and maintain cyber supplier partnerships to enhance Organisational security assurance

→ Own and drive all aspects of managing Information/ Cyber Security Risk from Strategy definition and socialising to measuring compliance and effectiveness for the district→ Sole SME for Info/ Cyber Security, Technology Risk and BCM for one of the largest Health Districts in NSW and Australia→ Steer Info Sec Governance Council with representatives from within IT (Digital Health) and other shared services like Enterprise Risk, Internal Audit and Privacy→ Represent IT at the Enterprise Risk Management and Emergency Management Steering Committees for the District led by CEO & COO→ Part of core working group for Cyber/ Information Security, Risk and Privacy across NSW Health which coordinates initiatives with CIO council→ Form and lead a statewide, NSW Health specific InfoSec and Privacy "Think Tank" and forum of experts to enhance overall security posture for the agency→ Frame Cyber Security Strategy to comply with regulatory requirements such as NSW Cyber Security Policy, ACSC Essential 8 and NSW Health Electronic Information Security policy

→ Imbed Risk based decision making part of IT's culture→ Introduced and program managed Business Continuity Management initiatives across the Group → Established a culture of Operational Resilience towards overall Business Resilience→ Bridged gaps between IT Service Management, Risk Management and Business Continuity→ Designed Business Cyber Risk Advisory Dashboard to enable risk aware decision making→ Led and Coordinated IT's response during Airline Incident aligned to Corporate Crisis Management→ Led Data Privacy (EU GDPR) and Protection requirements especially during Crises→ Conducted Disaster Recovery Readiness risk assessment for Group entities across the globe→ Owner of Data Centre Resilience assessment exercise → Defining and implementing Supply Chain Resilience as part of Vendor Risk Management for IT→ Led teams of varying sizes and experience levels in multiple IT and business projects

Identified means of increasing and sustaining Chapter membership

Audited a key location of the Steel giant for IT General Controls as part of SOX Certification for the corporate

→ Multiple ISO 27001 implementation and audits→ InfoSec Risk Management→ Business/ Customer interface→ Business Continuity planning and management→ Design and Implement Security Forensics→ ITIL→ Regulatory and Standards (SOX, HIPAA, SAS70, etc...) Compliance Audits → Security Awareness

→ ITIL Consulting with leading US Automobile manufacturer→ Security Consulting for leading bank in Middle East→ Customer Due Diligence

Single Sign On and Identity & Access Management Security Consulting

IDAM and Security Consulting

Security Pre-Sales Consulting

IT Systems Administration and Consulting