top of page
Dan-12.jpg

MEET THE TEAM (IT’S ME)

Dan Steel.

Fractional CISO and ISO 27001 auditor. CISSP, CISM and PECB-certified for ISO 27001.

Certified Information Security Systems Professional (CISSP)
Certified Information Security Manager (CISM) badge logo by ISACA
PECB LOGO

A BIT ABOUT ME

Trust is the whole job.

I've spent more than a decade being trusted by some well-known names to build security functions people can prove, so their customers can trust them in turn. Usually I was the first security hire.

Now I do the same for small organisations, fractionally. I start with three questions: what are we protecting, from who, and why does it matter to the business? Then I build the smallest system that answers them properly.

Outside work I'm a garden designer and florist, which is a surprisingly good training for spotting what needs pruning.

WORK EXPERIENCE

Where I learned it.

steel.fyi

2024 to now

Fractional CISO, interim Head of InfoSec and ISO 27001 auditor for SaaS, data, AI and retail teams across the UK and Europe, including Granular Energy, Risk Ledger and Steamhaus.

Client stories →

Airtime Rewards

Apr 2023 to Mar 2024

Migrated the compliance programme to a new RegTech platform and delivered Level 1 Service Provider compliance for PCI DSS 3.2.1.

X-Lab · NHS Test and Trace

Jul 2021 to Apr 2023

Designed, implemented and ran the security programme across GRC, security operations and product security for the UK's Covid-19 Test, Trace, Contain and Eradicate programme. Set compliance and certification strategy for new products and new countries.

Purple WiFi

Nov 2019 to Jul 2021

Built the first cyber security and data protection function, integrated an acquired business into the group programme, rolled out the first SIEM and MSP partner, and kept clients on seven continents GDPR-compliant.

THG

May 2019 to Nov 2019

Managed detection and response functions in the security operations centre and assessed M&A targets for security maturity.

Missguided

Apr 2015 to Mar 2019

Designed and built the first cyber security department, delivered four years of PCI DSS compliance, secured the AWS migration and ran the GDPR programme from day one.

Book a chat with Dan.

Thirty minutes, free, no pushy sales. Pick a time below.

© 2022-2026 Steel FYI. All rights reserved.

Vanta Partner badge
Drata Badge

Follow us on social media for the latest cyber security news and tips.

  • LinkedIn
  • White Twitter Icon
  • White YouTube Icon
trustpilot logo
bottom of page