A BIT ABOUT ME
Trust is the whole job.
I've spent more than a decade being trusted by some well-known names to build security functions people can prove, so their customers can trust them in turn. Usually I was the first security hire.
Now I do the same for small organisations, fractionally. I start with three questions: what are we protecting, from who, and why does it matter to the business? Then I build the smallest system that answers them properly.
Outside work I'm a garden designer and florist, which is a surprisingly good training for spotting what needs pruning.
WORK EXPERIENCE
Where I learned it.
steel.fyi
2024 to now
Fractional CISO, interim Head of InfoSec and ISO 27001 auditor for SaaS, data, AI and retail teams across the UK and Europe, including Granular Energy, Risk Ledger and Steamhaus.
Airtime Rewards
Apr 2023 to Mar 2024
Migrated the compliance programme to a new RegTech platform and delivered Level 1 Service Provider compliance for PCI DSS 3.2.1.
X-Lab · NHS Test and Trace
Jul 2021 to Apr 2023
Designed, implemented and ran the security programme across GRC, security operations and product security for the UK's Covid-19 Test, Trace, Contain and Eradicate programme. Set compliance and certification strategy for new products and new countries.
Purple WiFi
Nov 2019 to Jul 2021
Built the first cyber security and data protection function, integrated an acquired business into the group programme, rolled out the first SIEM and MSP partner, and kept clients on seven continents GDPR-compliant.
THG
May 2019 to Nov 2019
Managed detection and response functions in the security operations centre and assessed M&A targets for security maturity.
Missguided
Apr 2015 to Mar 2019
Designed and built the first cyber security department, delivered four years of PCI DSS compliance, secured the AWS migration and ran the GDPR programme from day one.
Book a chat with Dan.
Thirty minutes, free, no pushy sales. Pick a time below.
-JS-20240807%20PNG.png)



