Daniel Hughes
Managing Security Consultant @NCC Group
Signup · Get unlimited contacts
WORK HISTORY
Managing Security Consultant @NCC Group
Manchester, GB
Leading cross-functional consulting teams and delivering security assurance across product evaluation, payment card security, and OT environments.• Coordinating up to 10 consultants across 12 concurrent projects, delivering 95% on-time and increasing client satisfaction scores by 20%.• Delivering PCI DSS v4.0.1 assessments as a Qualified Security Assessor (QSA) across retail and financial sector clients, improving audit readiness scores by 40%.• Driving internal lab risk and nonconformity management within our ISO/IEC 17025:2017 accredited evaluation facility (CLEF).• Tightening configuration, patch and release governance for SMETS2 firmware baselines under CPA/PBA scheme timelines.
EDUCATION
Northumbria University
Msc, Digital & Technology Solutions Specialist (Cyber Security)
Imperial College London
BSc (Honours), Mathematics
ABOUT DANIEL HUGHES
I strengthen the security of Critical National Infrastructure. For over a decade, my work has centred on the intersection of OT and IT - specifically the assurance of UK smart metering systems (SMETS2) and the embedded devices that power them. Currently focused on opportunities in the Gulf region (UAE, Saudi Arabia, Qatar).At NCC Group, I lead product security evaluations under NCSC assurance schemes (CPA, PBA), manage cross-functional consulting teams, and deliver PCI DSS v4.0.1 assessments as a Qualified Security Assessor. The systems I have assessed support 20M+ UK households.What I bring to the table:→ Deep technical roots: hardware, firmware and protocol-level security testing (ZigBee SEP, DLMS/COSEM), vulnerability research, fuzz testing, and secure code review in C.→ Assurance and audit rigour: I have maintained ISO/IEC 17025:2017 lab accreditation with zero nonconformities across 5+ consecutive annual UKAS audits.→ Governance and compliance breadth: ISO 27001, PCI DSS v4.0.1 (QSA), ISA/IEC 62443, and working knowledge of the CRA and evolving EU product security regulation.→ Cloud security grounding: Azure (AZ-305, AZ-500, SC-100) and AWS (Solutions Architect Associate).I hold CISSP, CISM, CISA, and am registered as a Principal Cybersecurity Professional (PriCSP) with the UK Cyber Security Council. I am currently completing an MSc in Digital & Technology Solutions (Cyber Security) through Northumbria University.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.