Katy Gray

WORK HISTORY

EDUCATION

ABOUT KATY GRAY

I am specialised in Security Consultancy and Data Protection, as well as ISO: 27001. I have over 12 years experience in the Information Security industry during which time I have worked in the public sector and on Government contracts as well as private sector organisations, with over 4 years experience in financial services. I have a strong understanding and working knowledge of Information Security Management Systems, including Incident and Risk Management, Business Continuity Planning, Data Protection, Operational Resilience, as well as having been involved with numerous Internal and External Audits. I also specialise in developing Training and Awareness material for staff at all levels, and have produced numerous security policies and procedures, and have experience in managing them. I recently worked in 2nd line assurance, and have now moved into the 3rd line in Internal Audit. I am an excellent communicator at all levels, and I have the ability to learn quickly and deliver to a tight schedule and am eager to continue to learn and improve my skills. I have been formally trained by BSI in the Certification of Information Security Management Professionals and Internal Auditor for ISO: 27001, as well as being a certified DPO 2016.