Paul is an experienced Information Security and Risk professional with a strong background in cyber security governance, compliance, and operational security. He has hands-on expertise in ISO 27001, PCI DSS, risk management, vulnerability management, security awareness, data protection, and control assurance. His experience spans supporting organisations with strengthening security posture, improving compliance maturity, managing third-party risk, and embedding practical security controls across business operations.