Experience

Trustwave

• United States
• Computer and Network Security
• 700 & Above Employee

• EMEA Security Principal Consultant

  • Dec 2021 - Present

  Business development to help grow the EMEA Cyber Advisory practice, delivery of strategic and transformative consulting services including vCISO, NIST CSF maturity assessment, ISO 27001 assessment and implementation, cloud security, NIS-D compliance, crisis simulation, vendor risk management and global data protection compliance. Business development to help grow the EMEA Cyber Advisory practice, delivery of strategic and transformative consulting services including vCISO, NIST CSF maturity assessment, ISO 27001 assessment and implementation, cloud security, NIS-D compliance, crisis simulation, vendor risk management and global data protection compliance.



Commissum (Resillion)

• United Kingdom
• IT Services and IT Consulting
• 1 - 100 Employee

• Principal/Managing Consultant

  • Jul 2018 - Dec 2021

  We protect our clients from the information security risks associated with running a successful organisation in today’s data rich and networked world. We do this by listening to our clients and taking time to understand the assets they have that need protecting, and then using our years of experience, insight and expertise, combined with innovation and vision, to implement pragmatic and proportionate solutions to meet the challenges they face. Commissum specialises in providing a range of consulting and technical services across the spectrum of information security. As an independent, passionate, client-led organisation, meeting the needs of our clients and exceeding their expectations is the driving force behind everything we do. To find out more about what we do and how we can help, get in touch. Developing and managing the GRC consultancy practice service lines, providing a range of consultancy services to clients including data protection, ISO 27001/2, NIST, incident management and response, training and corporate compliance. Show less



CGI

• Canada
• IT Services and IT Consulting
• 700 & Above Employee

• Senior Security Specialist

  • Mar 2018 - Jul 2018

  Providing assurance and security consultancy to public and private sector clients, creating security management plans to ensure appropriate responses to identified risks. Providing assurance and security consultancy to public and private sector clients, creating security management plans to ensure appropriate responses to identified risks.



BSI

• United Kingdom
• International Trade and Development
• 700 & Above Employee

• Senior Consultant

  • Nov 2014 - Mar 2018

  Providing assurance and security consultancy to public and private sector clients, designing and implementing security management systems which combine and integrate seamlessly with existing business processes. Key accomplishments/projects: • Assurance review and audit program for three key government agency services; • creation and coordination of information security policies to comply with updated regulatory requirements within a government agency; • ISO 27001 audit for a national organisation; • ISO 27001 physical security audit for a government agency; • security and assurance lead to a UK central government directorate including security and assurance management of the data analytics program and the information digitisation program, provision of technical advice to departmental IT function, establishment of an ISMS, member of cross-department platform security working group, working with the security function on specific threat vector remediation and assisting with the design of a strategic protective monitoring capability; • conducted an extensive internal audit for large national organisation against tScheme compliance; • development of the company GDPR compliance service line; • leading and conducting GDPR compliance projects; • providing DPO services to multiple clients; • speaker on data protection law and compliance at industry events Show less



Trustis Limited

• United Kingdom
• Computer and Network Security
• 1 - 100 Employee

• Security and Conpliance Officer

  • Nov 2009 - Oct 2014

  Senior Consultant / Security Officer combined role, providing consultancy services to multiple clients and management of internal security compliance. Key accomplishments/projects: • Maintained the company’s existing accreditations and achieved certification against new and updated standards; • migrated from ISO 27001:2005 to 27001:2013 and incorporated ITIL and ISO 9001 into the compliance framework; • technical development of the platform secure configuration to host a certificate audit appliance; • management and development of certificate request validation and issuance procedures to comply with international regulations for multiple customers; • design and implementation of protective monitoring for both corporate and customer infrastructures in compliance with GPG 13; • managed and conducted over sixty key signing ceremonies; • creation of the Certification Practice Statement and associated procedures for two clients to align with the PSN Certificate Policy for the IPSec IL3 overlay; • provided guidance on and development of tScheme-compliant trust service policies and procedures for a UK police force; • security architecture design and preparation of RMADS for the accreditation of a government service; • representative on the CA/Browser Forum – the international organisation which sets standards and requirements for secure communication across the Internet; • development of secure build configurations at IL3 and IL5 for a government department; • management and guidance on the creation of ISO 27001 and tScheme documentation for an SFA IDAP service provided by a large multinational company; • development of tScheme-compliant documentation, and oversee the key signing ceremony for a government agency; • guidance on and creation of ISO 27001 and tScheme documentation for the implementation of the PKI behind a national identity card scheme for a European government. Show less



The Hills Group Limited

• United Kingdom
• Waste Treatment and Disposal
• 1 - 100 Employee

• IT Operations Manager

  • Nov 2008 - Oct 2009



Amber Credit

• Financial Services
• 1 - 100 Employee

• Head of IT / Security Manager

  • Oct 2006 - Oct 2008



Siemens

• Germany
• Automation Machinery Manufacturing
• 700 & Above Employee

• Senior Consultant

  • Aug 2004 - Oct 2006



Foundation IT

• United Kingdom
• Information Technology & Services
• 1 - 100 Employee

• Technical Consultant

  • May 2002 - Jul 2004



Insight Consulting

• Consultant

  • Apr 2001 - Mar 2002



Wickhill

• Business Consulting and Services

• Security Systems Engineer

  • Sep 1998 - Mar 2001



Datametrics

• IT Services and IT Consulting
• 1 - 100 Employee

• Technical Support Consultant

  • Jul 1997 - Sep 1998



Marine Accident Investigation Branch (MAIB)

• United Kingdom
• Maritime Transportation
• 1 - 100 Employee

• IT Manager

  • May 1989 - Jul 1997