Luke Spray

WORK HISTORY

ABOUT LUKE SPRAY

I’m an Information Security Manager with a strong track record of building and securing technology environments within fast-growing and regulated organisations. My experience spans security operations, governance, risk, and compliance, allowing me to implement practical security strategies that protect sensitive data while supporting business growth.I began my career specialising in Apple macOS environments, helping organisations adopt and scale Apple devices in traditionally Windows-centric infrastructures. Over time, my role evolved into security leadership, where I focus on embedding security controls, governance frameworks, and risk management practices across the organisation.I’ve worked closely with executive leadership, legal, compliance, and engineering teams to ensure that security and data protection remain central to business operations. I’ve played a key role in achieving and maintaining certifications such as ISO 27001, SOC 2 Type II, and Cyber Essentials Plus, helping organisations implement strong security controls, develop governance frameworks, and meet regulatory and customer security expectations.A core part of my role involves protecting sensitive data and strengthening organisational governance. I regularly lead initiatives around identity and access management, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and endpoint security. Alongside this, I help establish policies, risk management processes, and data protection practices aligned with regulatory requirements.My approach is focused on building scalable security programmes that balance strong governance, effective risk management, and a positive user experience—ensuring organisations can operate securely while meeting the demands of regulated industries.