11/02/2026 updated
MA
100 % available
Cybersecurity & GRC Consultant | ISO 27001, Cloud Security, AI Governance | CISM, CISA
Gateshead, United Kingdom
Worldwide
MSc Data Science, University of SunderlandAbout me
Cybersecurity & GRC consultant, 10+ years in IT. Founder & MD of Pyralink Innovation Ltd (Gateshead, UK). ISO 27001, SOC 2, NIST 800-53, UK GDPR, EU AI Act, cloud security (AWS, Azure, GCP). Contracts B2B with PI and public liability insurance.
ISO 27001GCPSOC 2
10+ years in IT, from IT support and networking through software development to cybersecurity and information security. Founder & MD of Pyralink Innovation Ltd. GRC and audit (ISO 27001, SOC 2, Cyber Essentials, NIST 800-53, UK GDPR, EU AI Act, ISO 42001 readiness), cloud security across AWS, Azure and GCP, Microsoft 365/Entra/Defender/Sentinel hardening, AI/LLM security testing (OWASP LLM & Agentic Top 10), vCISO and five-day security audits. Built PyraLink Prove (formerly CloudAuditX), a cloud security posture and compliance tool. Innovate UK Expert Assessor. Contracts B2B via Pyralink Innovation Ltd with PI and public liability insurance.
Skills: ISO 27001, SOC 2, GRC, Risk Assessment, NIST 800-53, UK GDPR, EU AI Act, ISO 42001, Cloud Security, AWS, Azure, GCP, Terraform, Microsoft 365, Entra ID, Microsoft Defender, Sentinel, KQL, Security Audit, vCISO, AI Security, Cyber Essentials, IT Support, Networking.
Experience
Professional experience10+ years
Freelancer since2022
Languages
EnglishNative speaker
Project history
Founded and leads a UK cybersecurity products company. Responsible for product direction and building the company's security and compliance products, including PyraLink Prove (multi-cloud posture and compliance platform), DataPrivacyVault (data-protection product for tokenising sensitive data from LLM prompts), TelemetrySentinel (telemetry pipeline normalising multi-cloud telemetry to OCSF before SIEM ingestion), and AI Paste Guard (Chrome extension warning users before secrets or personal data are pasted to AI chat tools).
Twelve-month contract in government-grade environments. Supported implementation of NIST SP 800-53 and 800-60 controls and Authority to Operate decisions; produced SSP, SAR and POA&M documentation; performed system categorisation and risk evaluation. Carried out gap assessments against ISO and NIST standards and supported SOC operations and external cyber security audits.
Handled real-time incident response across cloud and on-premise environments; contributed to the SOC operations playbook and supported junior analysts. Contributed to a cloud security framework aligned to CIS Benchmarks and Zero Trust principles; supported third-party and vendor risk management under ISO 27001 and UK GDPR; evaluated ITGC and access governance.