Alasdair Morison
Head of IT & Security @Finova
Signup · Get unlimited contacts
WORK HISTORY
Head of IT & Security @Finova
London, GB
Organisational Scaling: Architected a resilient cybersecurity posture and IT governance framework to support significant expansion in headcount and global footprint. • Fiscal Stewardship: Directed the global IT and security budget, delivering substantial recurring annual OpEx savings through cloud infrastructure optimisation and strategic FinOps. • Strategic Procurement: Negotiated a comprehensive Microsoft Enterprise Agreement, achieving significant cost avoidance while maturing the organisation to a premium security and compliance tier. • Compliance Leadership: Orchestrated the end-to-end ISO 27001 ISMS certification and established the Information Security Management Committee (ISMC) to embed a culture of security governance. • Data Governance: Authored enterprise-wide standards for Data Classification, BYOD, and Cloud Governance, ensuring alignment with GDPR and international data protection mandates. • Risk Management: Led comprehensive cyber and third-party risk assessments across hybrid-cloud environments, remediating high-priority vulnerabilities and enhancing audit readiness. • Security Architecture: Designed and deployed a modern, Zero Trust-aligned security ecosystem integrating advanced logging, Identity Governance, and endpoint defence capabilities. • M&A Integration: Successfully led the secure integration of global user populations and infrastructures following private equity acquisitions, ensuring service continuity under Transitional Services Agreement (TSA) constraints.
EDUCATION
Prifysgol Cymru Y Drindod Dewi Sant / University of Wales Trinity Saint David
HND Business Information Technology, Business Information Technology
University of Glasgow Adam Smith Business School
MBA Essentials (Executive Education - 4 Week Short Course)
ABOUT ALASDAIR MORISON
I lead cyber security and technology risk for complex, global organisations, helping boards and executives make clear, commercially grounded decisions in the face of regulatory change, cloud adoption, and emerging technologies.Recent certifications reflect a focus on executive‑level risk governance, AI security, identity‑centric Zero Trust, and regulatory readiness (including NIS2). As a Cyber and Technology Leader, I have worked across multiple industries including media, financial services, retail, healthcare, and manufacturing, securing enterprise environments and supporting organisations through significant change. I specialise in translating technical risk into clear, commercially grounded decisions for executive and board-level stakeholders, ensuring security enables, rather than restricts, business objectives. My experience spans large-scale, global environments, leading technology and security across complex estates, and helping organisations modernise infrastructure, strengthen governance, and operate securely at scale. Key outcomes delivered: • Enabled organisational growth by designing and implementing secure, scalable cloud and EUC architectures • Led infrastructure and security operations across 100+ countries spanning EMEA, Asia, and the Americas • Delivered significant cost efficiencies through cloud optimisation and improved vendor risk management • Led transitions from legacy environments to cloud-first, ISO 27001-aligned operating models I operate at the intersection of technology, risk, and business, translating complex security challenges into practical, outcome-driven strategies for leadership teams. More recently, I have focused on regulatory change, including NIS2 and evolving UK cyber resilience requirements, as well as the security implications of AI adoption.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.