Experienced ISO practitioners leading the delivery and audit of management system based governance and risk mitigation programmes for Information, Cyber and IT security, Artificial intelligence, Data privacy, Business continuity, Quality and IT Service management, based on industry standard policy and control frameworks and their practical application within a company cultural, regulatory, and risk-focused context. ISO standards experience includes: - ISO 27001 (2022) Information Security and Privacy - ISO 27017 Cloud security - ISO 27018 Personal information in the cloud -ISO 27701 Personal information -ISO 22301 (2019) Business continuity - ISO 9001 (2015) Quality management (complimentary exposure to ISO 14001 EMS and ISO 45001 OH&SMS) - ISO 20000-1 (2018) IT Service Management - ISO/IEC 42001 (2023) Artificial Intelligence (completed Oxford Artificial Intelligence Programme and advanced education in responsible AI) - ISO 44001 (2017) Collaborative business relationships Other standards and experience: - GDPR Practitioner - EU regulatory compliance lead practitioner, DORA, DSA (some DMA), NIS2, GDPR, E-Privacy, PSD - Extensive practical exposure to common information and cyber security, business resilience and privacy led risk-based frameworks, including CE/CE Plus, NIST CSF (inc. SP 800-53), HMG SPF, NCSC good practice, ETSI, PCI DSS, SOC, FedRAMP (some StateRAMP), HIPAA, HITRUST CSF, tScheme, ND 1643.