Omon Ilaboya

Information Security & Compliance Manager @Trustid

Developed, maintained, and reviewed Information Security & Data Protection policies and processes to ensure adequate oversight of compliance posture. • Drove the internal and external audit programme, ensuring compliance with information security, data protection/privacy requirements & successful certification to ISO 27001, UK Cyber Essentials Plus, UKDIATF. • Spearheaded the establishment of the enterprise risk management framework, developing the enterprise risk register, implementing risk controls, and exercising the business continuity plans. • Managed the data privacy function within the business to ensure effective privacy practices, which minimized risk and ensured compliance with data privacy laws, regulations (UK/EU GDPR, etc.), and market best practices. • Coordinated the vulnerability management process ensuring that appropriate remediation actions were implemented for the findings from penetration tests. • Led horizon scanning of data privacy developments impacting the organization and its industry. • Performed DPIAs, PIAs and LI assessments and maintained the company\'s RoPA. • Collaborated with the IT function to ensure alignment between cyber security and data privacy practices, and with cross-functional leadership to establish and implement privacy risk strategies. • Trained, advised, and drove up information security and data privacy awareness across the organization through various stakeholder engagements, including the development of data privacy awareness materials. • Led the security incident management process, reviewed, and responded to Data Subjects Rights Requests and customers’ data protection support queries, to ensure compliance with Data Protection requirements. • Ensured contract agreements met information security, data privacy & breach notification requirements.