At the University of Dundee, I developed NIST SP 800-53-informed policies and technical standards, carried out information security risk assessments, and advised management on controls and risk treatment. I also established and formally managed a cross-functional CSIRT, creating response playbooks and leading tabletop exercises.
As Senior Security Specialist, I oversaw Microsoft Defender and vulnerability management services and coordinated the security response to a significant 2025 ransomware/malware incident. I’ve also supported audit evidence and ISO 27001 preparation, aligned work with the Cyber Essentials baseline, and communicated remediation priorities to technical teams and management.
