Mohamed Farah

Governance & FrameworksInformation Security (ISO 27001): Working within security controls and risk treatment procedures.BCS CISMP: Formal training in information security management principles and risk governance.Policy Alignment: Translating complex technical requirements into actionable corporate policies.

Risk & Audit VerificationAudit Control Verification: 11+ years evaluating internal controls and verifying compliance standards.Operational Risk Assessment: Identifying vulnerabilities, mitigating operational risks, and managing incident logs.Gap Remediation: Designing structured verification workflows to resolve compliance discrepancies.

Compliance & OperationsData Protection: Enforcing GDPR and DPA 2018 standards across operational environments.
Access Control Protocols: Strict management of physical/digital security and clearance requirements (Active CTC).
Reporting & Metrics: Compiling compliance statistics and risk reports for senior leadership.