WHAT DO YOU DO?

I’m a Senior Consultant at URM in the Governance, Risk and Compliance (GRC) team. I focus on ISO 27001 and information risk management, with experience in the NIST Cybersecurity Framework and PCI DSS too. Basically, I help organisations protect their information by putting in place best-practice processes that meet these standards. I’m a lead auditor and also one of URM’s trainers, delivering courses like CISMP and PCIRM. On top of that, I lead a team of nine other GRC consultants, helping them develop their skills and deliver consistent, high-quality advice to clients.

WHY DO YOU DO IT?

I started in IT and first got involved with standards when our team implemented ISO 9001 for network support. That sparked an interest in information security standards, and I became a certification assessor with one of the big 4 firms. I’ve also worked as an information security manager before returning to consultancy at URM 13 years ago. What I enjoy most is helping organisations figure out the best ways to protect their information and giving practical guidance. I also love sharing what I know, whether that’s through formal training courses or mentoring colleagues

WHAT KIND OF PROJECTS HAVE YOU BEEN INVOLVED IN?

Over 13 years at URM I’ve worked on a wide range of projects. One interesting one involved a manufacturer of aerospace components, where we had to find ways to secure older avionics software and hardware without disrupting operations. Another was implementing ISO 27001 management systems across offices around the world, including Australia, New York, and Hong Kong. These projects are challenging because you have to balance international standards with local laws, cultures, and practices, but the payoff is helping organisations protect their information and operate securely on a global scale.

WHATS ON TOP OF YOUR BUCKET LIST?

I’ve always been drawn to history and want to visit the Arizona Memorial in Pearl Harbour, Hawaii. It holds a fascination for me I can’t fully explain. I’m also a big fan of sport, especially football and motorsport, and attending the Daytona 500 in Florida has been a long-time dream. It’s one of the fastest races on earth, and I can only imagine the thrill of 40 cars flying by at nearly 200mph. Honestly, I couldn’t pick between the two.  They’re both experiences I’d love to tick off my list.