Over 6 years of expertise in Information Security Management Systems, specializing in the development of security documentation such as policies and procedures. Proficient in compliance frameworks, including ISO 27001, GDPR, and HIPAA, with a strong grasp of Prudential Regulation Authority requirements. Adept at developing and managing risk frameworks, implementing cybersecurity strategies, and aligning business continuity practices with global regulatory standards, including PRA and EBA. Proven track record of managing vendor risk assessments, client cybersecurity agreements, and cross-functional collaboration with stakeholders.