Michael Ross

Information Security Officer @Slimming World

Alfreton, GB

Current Duties-• Ensures organisational compliance with key regulatory standards, including maintaining Cyber Essentials Plus, NHS Data Protection and Security Toolkit (DPST), PCI-DSS, Cloud Application Security Assessment (CASA), UK GDPR (2018), and alignment towards ISO 27001.• Develops and implements robust security policies and procedures, including Password Management, Privileged Access Management (PAM), Information Security, Acceptable Use, and Data Classification policies and procedures.• Supports the Data Protection Officer (DPO) by regularly reviewing and advising on Data Protection Impact Assessments (DPIAs), ensuring privacy risks are effectively identified and mitigated prior to the implementation of new projects and systems.• Collaborating with the information security team to embed and maintain the Cyber Security Risk Register, along with the Information Asset Register.• Developed and implemented the Cyber Security Incident Policy and associated procedures, including detailed process flows, collaborating across Technology teams to embed this into company-wide standards.• Investigate and respond to security incidents, including data breaches, cyber-attacks, and other security-related issues.• Designed and launched a company-wide Cyber Security Awareness Programme in July 2024, delivering monthly bite-size training modules to 550 employees, achieving and maintaining an average completion rate of 93%.• Created and manage a dedicated Cyber Security SharePoint communication site to centralise policies, procedures, and resources, complemented by regular company-wide communications highlighting security updates, improvements, and awareness initiatives.• Reporting on results of training and phishing simulations feedback to the Information Security manager, ensuring continual improvement and user engagement.

The Open University

Master's degree, Cyber Security

Sheffield Hallam University

BSc (Hons) Business and Technology, Business, Technology, ICT

Nottingham Trent University

Building Surveying, Building Surveying