Experience

Sanlam Investments UK

• United Kingdom
• Financial Services
• 1 - 100 Employee

• Information Security Manager

  • Jan 2016 - Present

  I am responsible for the development and monitoring of Sanlam UK’s Information Security Management System (ISMS). A key aspect of my role is to enhance our ISMS in order to retain and improve compliance with ISO 27001, as well as conducting a programme of security tests, reviews and audits. My work includes promoting a culture of security awareness across the business and maintaining the continued relevance of the security policies and risk management strategy by ensuring that it adequately addresses the needs of the business and satisfying legal and regulatory requirements. I am also responsible for the management of all information security incidents ensuring containment and recovery measures are implemented in a timely manner and that proportionate measures to reduce risks are identified and addressed.



Barclays

• United Kingdom
• Financial Services
• 700 & Above Employee

• Head Information Security Governance - Barclays Africa

  • Jan 2013 - Dec 2015

  Responsible for Information Security Governance at Barclays Africa Group, across more than ten African countries. My responsibilities included implementing security initiatives such as information classification and data protection, as part of a formal information security management system. Responsible for Information Security Governance at Barclays Africa Group, across more than ten African countries. My responsibilities included implementing security initiatives such as information classification and data protection, as part of a formal information security management system.



PwC

• Professional Services
• 700 & Above Employee

• Senior Manager, Risk Advisory Services

  • Jul 2011 - Dec 2012

  Information Security Management Consulting Information Security Management Consulting



Deloitte

• Business Consulting and Services
• 700 & Above Employee

• Senior Manager - Risk Advisory

  • Jan 2007 - Jul 2011

  Information Security Management Consulting Information Security Management Consulting



General Medical Council

• United Kingdom
• Non-profit Organizations
• 700 & Above Employee

• Information Security Project Manager

  • Nov 2005 - Nov 2006

  Twelve month contract: Implementation of an Information Security Management System (ISMS) and achieving certification to ISO 27001. Twelve month contract: Implementation of an Information Security Management System (ISMS) and achieving certification to ISO 27001.



NCC Group

• United Kingdom
• IT Services and IT Consulting
• 700 & Above Employee

• Information Security Consultant

  • Jun 2004 - Oct 2005

  Information security projects for large number of clients in public and private sector. Undertake gap analyses, risk assessments and implement security controls in line with best practice standards such as ISO 27001. Information security projects for large number of clients in public and private sector. Undertake gap analyses, risk assessments and implement security controls in line with best practice standards such as ISO 27001.



Echelon Consulting Ltd

• Information Technology & Services
• 1 - 100 Employee

• Information Security Consultant

  • Aug 2001 - Jun 2004

  Various information security consultancy projects, focusing on ISO 27001 implementation and certification. Various information security consultancy projects, focusing on ISO 27001 implementation and certification.