Deqa Ali

IT Risk and Compliance Analyst @ISS Facility Services UK

London, GB

Led key ISO 27001:2022 recertification efforts — conducted internal audits, reviewed technical documentation, and assessed ITGC controls across 8+ systems, contributing to a zero non-conformity outcome.• Prepared audit evidence and validated general controls for PwC financial audits, supporting regulatory reporting and compliance assurance.• Maintained and enhanced the IT Risk Register, identifying control gaps and driving mitigation strategies across UK & Ireland operations. • Delivered internal assessments and documentation reviews across incident response, access control, and change management to ensure policy alignment.• Partnered with system owners, legal, procurement, and global security teams to enforce policies and align vendor risk with ISS standards.• Supported onboarding governance for new digital systems — ensuring control design, audit readiness, and compliance from day one.• Drafted and refined ITGC standards and procedures aligned with ISO 27001, DORA, and PCI DSS frameworks.• Contributed to GRC maturity by embedding continuous control improvements and strengthening audit preparedness across critical systems.

Multiverse

Data Fellowship , Data Processing

Goldsmiths, University of London

Bachelor of Arts - BA, Politics and International relations

UCL

Master of Science - MSc, Risk, Disaster and Resilience