Hire the Best Information Security Analysts
in the United Kingdom

Cyber Security, Compliance, and Cloud Infrastructure expert with extensive knowledge of global regulatory standards and secure architecture review. As an ISO 27001 Lead Auditor and the CTO of CyberGaar, I bring deep technical expertise and strategic leadership to ensure your systems meet strict compliance requirements. Compliance & Audit Expertise Includes: - ISO 27001, PCI-DSS, SOC 2, GDPR - NIST SP 800-53, NIST SP 800-63, OWASP Standards - Risk & Gap Analysis, Control Activity Matrix (CAM) development - Vulnerability Assessment review, Penetration Test & Scanning Report analysis - Documentation review, Physical Security assessments, and Control Advisory Technical & Infrastructure Expertise Includes: - Cloud Platforms: AWS, Azure, Oracle Cloud - DevOps & CI/CD Security: Terraform, Ansible - Virtualization & Containerization: Docker, Kubernetes, VMware, Proxmox - Architecture & Code Review: C++, .NET, Java, Python, Node.js, Next.js - On-Premise and Hybrid Cloud environments

Information Security Professional with over 9+ years of dedicated experience. Areas of interest/specialization includes the following domains of information security. • Incident response/ Threat hunting/ Incident Management/ SIEM/ Malware analysis. • Security operations/ Cyber defense operations deployment and management. • Web application and Network Vulnerability assessment and Pentesting. • Deployment and implementation of different security products/ solutions. • Offensive Security/ Ethical hacking/ System hardening/ Threat modeling. • Consulting on Security products. • Cyber Forensics. • Compliance Assessments (PCI-DSS, ISO27001)

✅ My methodology for all of my work begins with understanding your business, first and foremost ✅ Ten years experience working in Cyber Security ✅ Certified as a Cyber Security Incident Handler (GCIH) and a Security Auditor (GCCC) ✅ Qualified at BSc level in Computer Security and Forensics ✅ Experience as a Non-Executive Director - I understand the business context as well as the technical and security aspects ✅ Experience in a variety of positions within security: - Technical (SOC analyst) - Risk (Information security officer) - Strategy (cybersecurity strategy specialist) - CISO (chief information security officer) ✅ I am not the type of consultant for a tick-in-the-box approach. If you genuinely want to achieve a better Cyber Security understanding and hygiene, my work quality will be a good fit. Description: A pragmatic, down-to-earth CyberSecurity professional who translates technical jargon into understandable business terms. I have worked in technical roles, risk management and strategy roles in both large enterprises and smaller organisations, giving me a balanced mix of experience when it comes to projects and job duties. I'm currently working as a part-time CISO for a cyber security organisation as well as a part-time freelance consultant. The vast majority of my experience is in the financial services sector, the most heavily regulated and mature industry for cybersecurity. However, I've also worked in retail in addition to a consultancy services role, working directly with customers in identifying breaches and recommending how they can improve their security posture. With cyber security, a business can't focus on improving everything, so it is important to focus on those few areas which give the greatest return on investment. My speciality is explaining cyber related businesses risk in a simple way, and advising on solutions in a rational, quantified manner to maximise ROI, both in effort and cost. I offer practical and pragmatic consultancy with: - vCISO (virtual chief information security officer) - Security training, coaching and awareness - Cyber risk assessments / security health checks - Strategy, framework and policy development - Cyber-essentials certification - ISO27001 gap assessments and implementation - NIS2 gap assessments and implementation - Security improvement plan creation and implementation

Hey there, I am an experienced information security analyst with varied experience in administration, compliance, security, third-party and audit. I have previously worked alongside potential customers, clients and stakeholders. I can help with administrative tasks, producing reports and tasks relating to collating, gathering and calculating data. I am well-versed in security frameworks such as NIST, ISO27001, SOC, GDPR, HIPAA and CCPA and adept at leveraging security tools and technologies to protect against cyber threats. Anything IT security and compliance related? Pick me.

I am an Information Security Analyst with four years of experience, specializing in manual quality assurance and web workflow testing. My expertise lies in identifying defects, documenting results, and ensuring data integrity and access controls. As a holder of CompTIA Security+ and ISC2 Certified in Cybersecurity (CC), I possess a strong understanding of secure systems and user authentication. I have hands-on experience testing across macOS, Windows, and iOS environments, which enhances my ability to deliver meticulous and comprehensive QA solutions. If you need a detail-oriented professional to bolster your project’s security and quality standards, let’s connect to discuss how I can help ensure a successful outcome.

Experience Includes: 💼 Cybersecurity Governance, Compliance & Risk Management Expert | 5+ Years of Experience I help organizations achieve and maintain top-tier security certifications, reduce cyber risk, and strengthen governance processes — from C-suite strategy to hands-on remediation. My background spans Cyber Essentials, PCI/DSS, Risk Management, CIS Controls, Internal Audit, and Vulnerability Management, with proven results for organizations of over 3,000 employees. ⸻ Core Expertise & Achievements 🔐 Cyber Essentials Certification • Successfully led Cyber Essentials certification for 3,000+ staff. • Implemented required security controls and changes to meet certification standards. • Delivered clear, concise presentations to C-suite executives to ensure buy-in and smooth execution. 💳 PCI/DSS Compliance • Achieved full PCI/DSS certification for a large organization. • Aligned processes, systems, and staff training to meet PCI/DSS requirements. 📊 Risk Management • Managed and maintained the IT Risk Register in collaboration with risk owners. • Led quarterly risk review meetings with the C-suite and stakeholders. • Developed and maintained IT risk policies, standards, and long-term security strategies. 🛡 Vulnerability Management (Rapid7 & Qualys) • Conducted weekly Qualys scans and reported on vulnerabilities. • Used Rapid7 to detect and mitigate website and server threats quickly. ✅ CIS Controls Implementation • Monitored and maintained CIS Controls using CrowdStrike Falcon and other security tools. • Managed remediation from low to critical severity vulnerabilities, working closely with infrastructure teams. 🏢 Security Reviews for Small Businesses • Conducted on-site security reviews across the UK, ensuring alignment with global security standards. • Provided governance and compliance guidance to operational companies. • Used Monday.com for structured review tracking and progress reporting. 🔍 Internal Audit & Compliance • Acted as the primary point of contact for Internal Audit on security matters. • Collected evidence for 75+ assessed controls and ensured timely audit action completion. • Maintained ongoing compliance with Group Audit requirements and industry standards. 📑 Governance & Policy Development • Created and maintained governance policies, compliance standards, and IT strategies. • Served as a trusted advisor to IT teams and business leaders on risk and governance issues. • Maintained gap analyses against global security standards and reviewed third-party security requirements/contracts. ⸻ Why Clients Hire Me: • Proven track record delivering compliance and certification for large organizations. • Strong communicator who can bridge the gap between technical teams and business leadership. • Detail-oriented, process-driven, and proactive in identifying and mitigating risks. 💬 Let’s work together to strengthen your organization’s security posture and compliance — without slowing down your business operations.