I lead cyber security at the University of the Arts London, protecting a complex multi-site community across 10,000+ endpoints, 1,000+ servers and approximately 37,000 active identities. I built the function from one role into a ten-person team and secured investment growth from £440,000 to £3.8 million through a board-approved five-year strategy.
I turn cyber risk into clear executive decisions, with governance boards, Audit and Risk Committee reporting, risk scorecards and accountable remediation. At UAL, I reduced endpoint vulnerability instances from approximately 1.5 million to 35,000 in 12 months, introduced 24/7 managed security operations, and achieved a one-minute median detection time and 60-minute mean response time in service reporting.
Before UAL, I founded Lotus Codes, advising SME and mid-market clients on security maturity, ISO 27001, NIST CSF and Cyber Essentials, while leading responses to six live cyber incidents. At PetroSaudi Oil Services, I established an ISMS and enterprise risk programme, reduced cyber risk from high to low, and achieved 99% data loss prevention coverage across international operations.
I build practical, risk-led security programmes spanning Zero Trust, identity and privileged access, vulnerability management, supplier assurance, incident readiness and cyber resilience.
