- Design and implement organisation-wide security strategies tailored to business needs and regulatory frameworks, including PCI DSS and GDPR.

- Conduct risk assessments, policy development, and compliance management for standards such as ISO 27001, Cyber Essentials, or industry-specific guidelines.

- Provide ongoing guidance, oversight, and remediation for information security programs, working directly with executives and technical teams to mitigate risks and strengthen defenses.

- Deliver cybersecurity education and awareness campaigns for staff, including stakeholder reporting and board-level briefings to ensure buy-in and support for security initiatives.

- Support incident response, threat assessments, and crisis management after breaches or in times of urgent need.