Nov 2022 – Present · 3 yrs 4 mos

• Built and automated an enterprise Vulnerability Governance Board, implementing SLA tracking workflows and executive jeopardy dashboards to surface remediation risk and support senior-level prioritisation.
• Conduct risk-impact assessments for security incidents, documenting business exposure and presenting executive reports aligned to NIST CSF and ISO/IEC 27001 control objectives.
• Developed and maintained Cyber Incident Response Plans (CIRPs) aligned to ISO/IEC 27001 and NIST SP 800-61, ensuring audit-ready procedures and regulatory compliance.
• Produced enterprise incident reports and post-incident reviews that strengthened organisational risk posture and informed long-term security improvements.
• Led vulnerability-management coordination across enterprise infrastructure, prioritising remediation activity and tracking risk-reduction progress to support governance and compliance objectives.
• Partnered with SOC, compliance, architecture, and policy teams to coordinate containment actions, governance reporting, and continuous-improvement programmes.
• Conducted proactive threat-hunting using SIEM and advanced detection platforms to identify emerging risks before business impact.
• Supported business-continuity and ransomware tabletop exercises to validate response readiness, escalation pathways, and regulatory alignment.
• Delivered audit walkthroughs for internal and external assessors, demonstrating incident-response controls, evidence-collection processes, and governance maturity.
• Embedded continuous-improvement cycles by feeding lessons learned into enterprise risk frameworks and audit-readiness programmes.

Jul 2022 – Nov 2022 · 4 mos

• Advised enterprise clients on security solutions aligned with ISO 27001 and NIST CSF, helping organisations improve compliance posture.
• Conducted pre-sales risk assessments and participated in stakeholder compliance discussions to shape tailored offerings.
• Collaborated with architects to design secure cloud and network solutions, introducing governance controls and IAM best practices.

Mar 2022 – Jul 2022 · 4 mos

• Intensive 5-month cyber security training & workplace readiness program. CIISec Accredited.
• Solving real problems in the areas of:
• Cyber Security Culture & Awareness
• Cyber Security by Design
• Access Control
• Offensive & Defensive Security
• Business Continuity & Incident Response
• Certificates Attained:
• British Computer Society's Certificate in Information Security Management Principles (BCS CISMP)
• ISO 27001 Foundation Certificate
• Cloud Security Alliance's Certificate of Cloud Security Knowledge (CSA CCSK)
• CAPSLOCK's Certified Cyber Security Practitioner (Ce-CSP)

Sep 2015 – Mar 2022 · 6 yrs 6 mos

• Consistently achieved outstanding performance in various metrics within Sales and Retentions, while upholding exceptional customer service feedback standards.
• Maintained the position of top-performing advisor across all sites for mobile sales consecutively for four months.
• Awarded the 'ARPU (Average Revenue Per User) of the year Award' in 2017, just two years after joining, for consistently delivering the best-fit products to meet customer needs and effectively retaining a high volume of customers.
• Demonstrated exceptional proficiency in resolving customer complaints, resulting in a high success rate of resolving issues without escalation.