Zoe H

Protected digital and paper assets across 250+ care homes and 7 mental hospitals, ensuring compliance with GDPR, Data Protection Act 2018, NHS, and CQC standards. Managed external auditor relationships and data incident responses, while also conducting ISO 27001 gap analyses, internal audits, and security risk assessments.

Managed the ISMS to ensure compliance with GDPR and PECR, and developed and implemented data privacy policies and procedures. Coordinated PCI DSS and external GDPR audits with reliable results, and managed personal data requests, RoPA, and third-party risk assessments.

Managed the ISMS, including the implementation of the ISO 27001 framework, and coordinated ISO 27001 internal and external audits with reliable results. Developed a training platform for data protection and privacy awareness, and conducted risk assessments while managing information security incidents.

Managed the health and safety management system and policy development, conducting risk assessments to ensure legislative compliance. Coordinated safety training and managed internal and external audits, achieving a record 93.7% pass score on the BP Safety Audit.

Managed educational courses at schools and colleges, supervising examinations and ensuring programme delivery. Vetted safeguarding documentation for all staff and developed a management compliance records system.

Completed certifications in GDPR and ISO 27001 Lead Auditor Foundation, enhancing expertise in data privacy and information security management. Also obtained NEBOSH and IOSH Managing Safely certifications, demonstrating a commitment to health and safety standards.

Undertook an Information Technology Course at Henley College, building foundational knowledge in IT principles and practices. This course provided a solid understanding of technology relevant to information security and data management.