Developed a Security Strategy: Created and aligned a cyber security framework with the business strategic plan. Developed the information security plan, information security program; and implemented a security governance, organizational structure, and information security risk management program. Security Governance: Established and responsible for creating the strategic-level Security Steering & Risk Committee, demonstrating a Return on Investment, KPIs, balanced scorecard and performance measurement metrics against security program (governance, risk & compliance). Responsible for establishing and managing the operational Security Working Group to ensure security areas of focus, security projects and security streams of work are completed on time and within budgetary constraints (security program management & operations). Creating information security core competency matrix where identification of technical solutions to manage administrative application of security assessments and testing, cryptography, MALWARE countermeasures, asset security techniques, SDLC, data life cycle etc., are fit for purpose. Leadership of a busy and diverse security department covering personnel, infosec/ cyber, physical, industry (supply chain & vendor management) and working in close collaboration with the technical team. Control Framework: Adapting a control framework to ensure compliance with legal, regulatory and industry best standards using own, and industry standard controls such as NIST SP 800 series, ISO27001, PCI DSS, CIS and other. Developed a security policy and management framework to meet privacy (GDPR), information security (ISO, NIST etc.), personnel (screening, vetting and insider threat mitigation) and the business physical security obligations (authorized economic operator, commercial and defence sector). Cyber security and digital transformation.