Neil S.
Senior Cloud Security Engineer @ONYX Insight
Signup · Get unlimited contacts
WORK HISTORY
Senior Cloud Security Engineer @ONYX Insight
Nottingham, GB
Lead technical security governance across hybrid cloud and infrastructure domains, embedding structured risk assessment and ISMS-aligned remediation processes within a cloud-native and critical infrastructure environment. Create and manage ISMS security tickets across AWS, Azure, on-prem infrastructure, and network domains, defining control gaps, articulating impact, scoring likelihood and consequence, and assigning structured remediation aligned to risk appetite. Assess customer environments following deployment of IoT monitoring solutions, evaluating compliance alignment against frameworks including SOC 2, NIST, and NERC CIP. Enforce strict network segregation and access boundary controls to prevent unauthorised access between corporate and operational infrastructure. Coordinate annual CREST-accredited penetration testing, present findings to stakeholders, and manage remediation tracking to strengthen control effectiveness and audit defensibility. Author ISO 27001-aligned technical policies, including software development security and password governance standards.
ABOUT NEIL S.
Senior Security Architecture & Governance Lead with over 20 years’ experience operating across regulated financial services, insurance, higher education, and critical infrastructure environments.I specialise in identity-led security architecture, aligning hybrid (on-prem and cloud) infrastructure, identity platforms, and cloud security controls with structured governance frameworks including ISO 27001, PCI-DSS, SOC 2, CIS, and NIST.My work sits at the architecture–assurance boundary, providing structured security design authority and translating control intent into defensible technical guardrails across AWS, Microsoft 365, and hybrid identity environments including Active Directory and Entra ID.Recent work has focused on ISMS governance and structured threat and operational risk modelling, hybrid Active Directory to Entra ID identity modernisation and legacy AD phase-out, and hybrid cloud security architecture supporting transformation programmes in regulated environments.I regularly support CSPM-driven posture assessment and risk-based remediation sequencing, oversee CREST-aligned penetration testing with audit-defensible remediation tracking, and validate network boundary enforcement within critical infrastructure environments.My background also includes FCA-aligned banking infrastructure strategy and ensuring regulatory control continuity during cloud transformation initiatives.I am particularly interested in roles where security architecture, identity strategy, governance, and advisory converge — environments where security design decisions must withstand both technical scrutiny and regulatory challenge.Eligible for UK Security Clearance (SC).
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.