Executive Security Governance leader | 12+ Years Experience | CISM, CISA, CRISC & CII Sec PriCSP

Executive Security Governance

Executive Security Governance leader with over a decade of experience designing and implementing comprehensive security governance frameworks for complex multinational organisations. Proven track record aligning security strategy with business objectives and regulatory requirements across large commercial enterprises. Expert in risk management, compliance (ISO 27001, GDPR, SOC 2, DORA, HIPAA, NIS2), incident management, and stakeholder engagement at Board and C-Suite level. Certified CISM, CISA, CRISC with a consistent record of transforming security posture through measurable outcomes.

SKILLS

• Security Governance Framework Development
• Risk Management & Compliance
• ISO 27001 / GDPR / SOC 2 / DORA / HIPAA / NIS2
• Incident Management & Response
• Third-Party & Vendor Risk
• C-Suite & Board Engagement
• Team Leadership & Mentoring
• Business Continuity & Disaster Recovery
• Security Awareness & Culture
• Internal Audit
• Cloud Security
• Privacy by Design

KEY ACHIEVEMENTS

Organizational Culture Transformation

Spearheaded the development and implementation of innovative security awareness programs, resulting in a 40% increase in employee knowledge and a 30% reduction in security incidents and risky behaviour.

Operational Efficiency & Privacy Automation

Led the successful implementation of a fully automated DSAR process, significantly reducing processing time by 80% and improving overall efficiency.

ROPA Project

Developed and implemented automated ROPA processes, reducing manual effort by 50% and improving data accuracy. This enhanced organizational risk visibility and informed strategic decision-making.

Enterprise Regulatory Excellence

Within 10 months successfully led the organization in achieving and maintaining major compliance certifications, including HIPAA, SOC 2, expanded ISO 27001, and adherence to NIS2 and DORA.

Risk Posture Enhancement

Established a robust internal audit team, resulting in the elimination of audit findings and enhancing the organization's risk profile.

Privacy/Security by Design

Implemented a robust security and privacy by design (SBD) process into the development lifecycle, fostering a proactive security culture and ensuring that security and privacy considerations are embedded from the outset.