Senior Cybersecurity Consultant specializing in GRC, SecOps, and Cloud Security

I am a Senior Cybersecurity Consultant with extensive experience across Governance, Risk & Compliance, Security Operations, and Cloud Security. My expertise covers the full lifecycle of designing, implementing, and maturing security capabilities for financial services, payments, SaaS, media, and research/technology organisations, including highly regulated and audit-intensive environments.

I support clients in building and maintaining ISO 27001/27701-aligned ISMSs, mapping and implementing NIST CSF and NIST 800-218 controls, and preparing for regulatory frameworks such as CROE, DORA, NIS2 and SWIFT CSCF. I have extensive experience in developing policies, procedures, risk registers, KPI dashboards (ISO 27004), and governance processes that align security activities with business objectives.

My work includes third-party risk management, security assessments, compliance gap analyses, and audit preparation.

In Security Operations, I advise and support organisations in improving SOC maturity, strengthening detection engineering, onboarding new log sources, assessing incident-response readiness, and governing MSSP performance. I have led vulnerability-management lifecycles, implemented attack-surface management processes, and integrated CNAPP, VM, and external telemetry to achieve a unified risk view. I am experienced in red-team/blue-team coordination, IR playbook development, threat-intelligence enrichment, and SIEM optimisation, including MISP-based automation.

In Cloud Security and DevSecOps, I work with AWS, Azure, and GCP to evaluate and improve security posture, identity and access management, network security, workload protection, and monitoring practices. I also support secure-development activities through integration of NIST 800-218 practices, secure coding standards, tooling (SAST/DAST/SCA), and CI/CD pipeline security controls. I help engineering and product teams embed security by design without slowing delivery.

My approach is structured, collaborative, and outcome-driven. I translate complex technical and regulatory requirements into actionable tasks, clear roadmaps, and measurable results. I work effectively with engineering, product, infrastructure, and leadership teams, ensuring that decisions are risk-informed and aligned with organisational priorities.

• ISO 27001/27701 ISMS implementation & maturity

• NIST CSF • NIST 800-218 • ISO 27004/27005 • CIS Controls

• DORA, NIS2, CROE, SWIFT CSCF, FedRAMP readiness

• SOC governance, SIEM onboarding, MSSP oversight

• Incident response, IR playbooks, detection enhancement

• Vulnerability management and attack-surface management

• Threat intelligence (MISP), automation, KPI dashboards

• AWS, Azure, GCP cloud security & identity management

• DevSecOps integration, CI/CD pipeline security, SAST/DAST/SCA

• Python, PowerShell, Bash, Git, EDR/XDR, CNAPP platforms

• Risk management, governance models, policy frameworks

• Executive-level reporting