Lee User

Dynamic Director with over 20 years of experience in governance, risk, and compliance. Proven expertise in leading strategic initiatives, managing compliance frameworks, and risk mitigation processes. Successfully spearheaded ISO27001 certification and developed robust security policies, enhancing organizational efficiency by 30%.

Orchestrated all facets of sector development, encompassing strategy and planning, performance management, regulations, licensing and permits, and stakeholder engagement. Devised, planned, and managed sector strategies, operating models, objectives, and key performance indicators.

Championed the development and execution of sector strategies to facilitate the transition of authorities from local government entities.

Diagnosed and managed controls deficiencies, collaborating with business management to mitigate risk exposures. Oversaw daily operational activities associated with sector tasks to ensure seamless function across departments.

Managed the ISO27001 ISMS Certification Project, implementing the CBK Cyber Security Framework controls. Formulated Information Security and Cyber Security policies and procedures.

Oversaw the Global Security Monitoring Programme for the implementation of the Network Intrusion Detection Security Project.

Oversaw compliance initiatives related to information security and technology risk management. Partnered with senior management teams to propose innovative security strategies and implement impactful security projects.

Project managed multiple large and medium-scale projects, including the re-engineering of business processes and the rollout of electronic document management systems.

Established and maintained comprehensive information security policies aligned with business objectives. Engineered a systematic, analytical, and continuous risk management process.

Delivered security consulting services to clients, including extensive security assessments.

Managed security projects aimed at evaluating existing data security arrangements and implementing recommended enhancements.

Instituted security solutions to enhance system security and minimize risks.

Performed comprehensive control reviews on operational areas and executed full systems integrity audits.

Currently enrolled in the MSc programme in Information Security Management, focusing on advanced topics in information security and risk management.

Completed a 2-year degree programme in Computer Systems Auditing, focusing on the principles and practices of auditing computer systems and information technology.