Enoch Oppong Peprah

Manager, Cybersecurity Operations @City St George’s, University of London

London, GB

Champion a culture of proactive risk management and continuous improvement, using data-led analysis to drive targeted remediation and investment prioritisation. Built the cybersecurity department for the first time in the history of legacy St.George’s University of London. Conduct regular risk assessments activities for the COO Technology function, identifying potential weaknesses and recommending proportionate controls. Directed risk-based planning and delivery of independent assurance activities—including targeted control testing, thematic reviews and sector-wide control assessments. Regularly brief/communicate with business partners, risk officers and technology executives, ensuring incident context and strategic actions are clearly understood. Championed oversight and challenge of first-line activities, ensuring robust implementation of internal policies, regulatory compliance and timely issue closure. Execute detailed IT control testing under an enterprise-wide assurance framework, focusing on control design, operating effectiveness, and audit readiness Develop and present risk dashboards, insight reports and key risk indicators (KRIs) to senior stakeholders, committees and governance forums Monitored emerging cyber threats, providing actionable threat intelligence and advising leadership on proactive measures and new security technologies Contribute to periodic business unit risk profile reviews, maintaining compliance with the firm’s Risk Management Framework. Orchestrated engagement with internal and external auditors, regulators (incl. JISC/NCSC) and customer assurance teams—reducing audit duplication and increasing assurance coherence. Designed and delivered internal cybersecurity training programmes to enhance awareness and embed secure behaviors across business units. Support compliance with internal security standards, regulatory requirements and industry guidance by mapping risks against NIST,ISO27001, COBIT, and CIS Controls.