Colin M.
Cyber Security Delivery Lead @LGC
Signup · Get unlimited contacts
WORK HISTORY
Cyber Security Delivery Lead @LGC
London, GB
Responsible for the procurement, implementation, and governance of enterprise-wide Identity Governance & Administration (IGA) using Azure Entra ID, alongside the uplift of GDPR, security, and privacy maturity across the organisation.Key Deliverables & AchievementsLed the full RFP, vendor evaluation, and procurement of an enterprise IGA solution, ensuring alignment with architectural, operational, and security requirements.Delivered an end-to-end IGA capability using Azure Entra IDAutomated access attestations and implemented systematic removal of access rights, reducing privileged access exposure and strengthening compliance posture.Assessed, and remediated multiple high-risk cybersecurity issues through technical fixes, compensating controls, and structured risk management.Established operating procedures, governance frameworks, and day-to-day runbooks to support sustainable IGA operations.Led change, communication, and stakeholder engagement activities across IT, security, and business units to embed new identity and privacy practices.Strengthened GDPR and privacy maturity, including improved ROPAs, DPIA processes, privacy notices, and data governance controls.Enhanced security of customer-facing and transactional websites, including dependency remediation, CMS hardening, and secure design improvements.Delivered the implementation of a Web Application Firewall (WAF) to protect high-risk digital assets and enforce centralised security policies.Implemented multi-factor authentication (MFA) across critical platforms, improving user security, reducing fraud risk, and meeting regulatory expectations.Enhanced Security Operations (SOC) coverage across high-risk areas, improving detection, response, and continuous monitoring capability.
EDUCATION
University of Hull
BTEC
ABOUT COLIN M.
As a cyber risk, assurance, and compliance professional, I support organisations in managing cyber threats, governance maturity, and regulatory obligations—particularly in complex, high-stakes environments such as Critical National Infrastructure (CNI) and the wider public sector.My work spans cyber programme delivery, risk reduction, maturity uplift, and assurance, aligned to leading frameworks including the NIST Cybersecurity Framework (CSF), NCSC Cyber Assessment Framework (CAF), and ISO/IEC 27001. I deliver results through actionable strategies that address both the technical and business realities of cybersecurity—bridging operational risk, cyber policy, and programme management.Key areas of expertise include:• NIST CSF, ISO 27001 and NCSC CAF implementation, gap analysis, and roadmap design • CNI-specific risk identification, third-party assurance, and regulatory response • Maturity assessments and compliance improvement plans • Cybersecurity operating model design and control uplift • Policy, governance, and security performance reporting to senior stakeholders • Business continuity, resilience, and critical asset protection • Supporting alignment with sector-specific regulations and emerging standard• Cyber Program/Project deliveriesI work closely with internal and external stakeholders to design and deliver security improvements that are outcome-driven, auditable, and resilient to real-world threat scenarios. My experience spans central government, defence, local government and other regulated industries—where assurance, audit-readiness, and business accountability are essential.I bring a practical, delivery-focused approach to cyber resilience—working alongside operational teams, SMEs, and leadership to embed sustainable improvements. Whether advising CISOs, responding to regulators, or leading workstreams across enterprise-wide cyber initiatives, I translate standards into outcomes. I thrive in fast-paced, ambiguous environments where clarity, credibility, and delivery momentum are critical.Open to **contract, FTC, perm and fractional engagements**, I offer leadership and delivery capacity across cyber programmes that require hands-on guidance with executive alignment. Whether your organisation is scaling its cyber capability, preparing for audit, or recovering from a near-miss, I offer the clarity, structure, and experience to reduce risk fast.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.