Works in theory.
Works in practice.
Head of information security & compliance at a private risk advisory — Security, compliance and IT.
I built its ISO 27001 ISMS to UKAS-accredited certification, designed its security architecture, and deliver evidence-grade investigations to legal standard.
Before this, eight years in UK policing: child-abuse investigator, sergeant, and operational communications manager leading a nine-person communications function. Trained in philosophy and public policy, with mixed-methods research at the Master's level.
- Built the ISO/IEC 27001:2022 ISMS to UKAS-accredited certification: all 93 Annex A controls in an approved Statement of Applicability, a full policy suite, risk register, asset register and supplier-assurance process.
- Consolidated the controlled document set from ~120 to 68, cutting monthly review load from nine documents to five while retaining every mandatory ISO record.
- Hold and renew Cyber Essentials (certified 2025, v3.2; renewed August 2026, v3.3), with live remediation during assessment.
- Run the UK GDPR / Data Protection Act programme: ROPA, DPIA and data-subject-rights procedures, a personal-data-breach procedure with the 72-hour ICO notification path built into business continuity, and lawful-basis analysis underpinning every investigation.
- Designed and maintain the security architecture.
- Business development: authored a screening-governance proposal that converted into live delivery, ran a UK public-procurement tender pipeline, and developed the firm's Trust Centre and brand assets.
- Founded and direct the company, which exists to advance public education in AI and digital skills, with priority given to the digitally excluded.
- First programme, Come Try AI: free hands-on public workshops that teach people to use AI tools safely and effectively to improve their lives.
- First workshop day runs in September 2026, with 64 places.
- Specialist on Clear, Hold, Build, the Home Office programme against organised crime.
- Communications and intelligence work across the programme.
- Communications Manager for South-Central Division (Oct 2023 — Oct 2024), directing messaging and information flow across live incidents.
- Supervised and developed a team of up to eight — tasking, welfare, standards and performance.
- Made time-critical decisions in fast-moving situations, coordinating between frontline units and command.
- Conducted safeguarding investigations, building court-standard case files and managing evidence with rigorous chain of custody.
- Worked across multi-agency safeguarding arrangements — social care, health and the CPS.
- Balanced victim care and welfare with evidential and procedural demands under sustained emotional load.
- Joined via Police Now's competitive graduate leadership scheme, policing a dedicated neighbourhood as a frontline emergency-response officer.
- Assisted the major investigation Operation Knowlton, which saw five defendants jailed for life for murder; managed the initial scene of a fatal road-traffic major incident — first aid, evidence, and coordination of arriving responders.
- Built community trust, handled incidents end-to-end, and developed the investigative and communication foundations the later roles were built on.
- Worked in a small team on a knowledge-management and recruitment problem in British law enforcement, applying the ArchiMate business-architecture framework.
- Combined the team's analysis into recommendations that were well received by the client.
Selected work across security, compliance, investigations, applied AI and communications. Details generalised to protect client confidentiality.
Built the organisation's ISO/IEC 27001:2022 ISMS to UKAS-accredited certification — all 93 Annex A controls in an approved Statement of Applicability, a full policy suite, and the risk, asset and supplier-assurance processes behind them. Consolidated the controlled document set from ~120 to 68 while retaining every mandatory record.
Assembled and structured a 482-exhibit evidence corpus documenting intimidation and its business impact, organised and cross-referenced to withstand legal scrutiny, in only two days.
Delivered a solicitor-instructed asset-tracing investigation across 321 exhibits, with every exhibit integrity-stamped so its authenticity and timing can be independently verified.
Assessed the screening status of all 1,429 staff of a client in only a few hours, surfacing 218 individuals over-checked and two hard legal safeguarding gaps — turning the findings into a remediation and governance proposal and advising the compliance posture of the policy solution.
Designed and built a private, locally-hosted team of models on my own hardware, for research and analysis where the material stays on the premises. Models chosen for intelligence, independence and integrity, with every output verified against source; paired with a redaction gateway that strips personal data before any prompt reaches a cloud model.
Created the “Walk and Talk” campaign to improve communication between police and the public — designed the internal administrative structure, the feedback and information-gathering survey, and all marketing materials, then trained other forces to implement it across the country.
Managed all communications across South-Central London during Operation Bridges following the Queen's passing — social-media monitoring, live local campaigning, internal operational communications, and advising management, colleagues and partners.
Use AI across research, drafting, and analysis to compress work that would otherwise take days into hours — while verifying every output against source.
Built a private, locally-hosted team of models for research and analysis where the material stays on the premises. Models chosen for intelligence, independence, and integrity.
Built a custom expert-pruning pipeline (REAP, extended to run data-parallel across three GPUs, about 2.4× faster) and produced a pruned model to fit capable models to the hardware. Evaluated it head-to-head on the tasks that matter and retired it when newer models beat it.
Strips personal data before any prompt reaches a cloud model.
Wazuh 4.14 (OSSEC-based SIEM/XDR) deployed all-in-one on a Pi with six agents: FIM, vulnerability management, custom decoders and correlation rules, rule tuning, centralised agent config, active response (iptables block), CIS SCA review, index retention, ntfy alerting, daily alert triage.
Hand-painted tabletop miniatures.