DataGuard 

Senior Consultant Privacy 

Senior Consultant Privacy - Global Corp.

Rehabilitation Culture CIC

Rehabilitation Culture is a small Community Interest Company that supports men over 50 in prison in preparation for their release

Director

DPOrganizer

Senior Data Protection and Customer Solutions Expert

BCS, The Chartered Institute for IT

Head of Compliance

Compliance Manager

Data Protection Lead

My background in front line operations, compliance, management and training in financial institutions, stood me in good stead when I fell into the world of Data Protection.  I qualified as a Data Protection Practitioner in December 2019 and I've been hooked ever since!

Recognised as being a highly motivated individual with strong communication skills, I was shortlisted and a finalist in the categories of Rising Star and Compliance Officer of the year at the PICASSO awards in 2022.

Having presented at a number of international conferences, spoken on panels and contributed to international privacy drives I enjoy enthusing others, sharing my knowledge to stakeholders helping them develop and strong and uncomplicated privacy culture and ethos across the organisation.

As an ISO 9001 Quality Management Systems Lead Auditor, I believe that compliance of all relevant legislation should part of an organisations culture and not a tick box exercise. My ability to interpret and delivery regulatory requirements across the business, whilst maintaining high internal principles and keeping external business drivers at the fore, ensures that compliance does not become an afterthought in the business.

In my current role, I work with a number of international clients of all sizes, helping them to develop and deliver their privacy programme in a manner that suits their organisation.  Understanding the customers drivers and priorities is critical to success.

My passion for data protection privacy is linked closely to my passion for people. I firmly believe that data protection and privacy is not and should not be just a work thing but a life thing. Data protection and privacy are all about looking after people - just like you and me.

Elizabeth Smith

Specialist Skills Hub

Workforce Consulting, Recruitment, Training and Apprenticeships Provider specialising in Cyber Security, Data Protection, Data Governance, Digital, Tech & GRC

#jointheskillsrevolution

Founder and CEO

CyberPRO

Founder

North West Cyber Resilience Centre

Chair of Cyber Expert Group (Voluntary)

Salus Controls PLC

Global DPO

The Landing at MediaCityUK

Director of Cyber Security

Royal London

Led and successfully delivered a £10million programme of work to build an in house Data Governance capability covering all RLG group entities, delivered system, people and process requirements to meet new Data Protection Regulations GDPR/DPA 2018 and delivered information security remediation to bring group in line with risk appetite. Reporting quarterly to the Board. Programme delivered to time, cost, quality requirements and independently audited.

Built, developed and led BAU Data Governance function responsible for governance, data protection and information security for Group.

Group Head of Data Governance | Group GDPR Lead | Group Information Security Officer 

Independent consultant and interim manager (Consumer Credit Industry - FCA Authorisation Programmes)

Held a number of interim senior management positions, including Head of Risk and Senior Risk Manager whilst preparing firms for FCA Authorisation

-FCA authorisation;
-section 166 review;
-design and implementation of risk and compliance frameworks;
-Information Security Standards and Information  Security Management Systems such as ISO27001 and PCI DSS.

Deloitte | Lloyds Banking Group
Arrow Global
Robinson Way/Hoist Finance
One Advice Group

Head of Risk and Compliance | IT and GRC Consultant | Consumer Credit | FCA Authorisation Programmes

The Co-operative Bank plc

Assignments:	Improving Risk Management Programme (Regulatory)
		Infrastructure Project (Regulatory)
		IT Resilience Project (Regulatory)	
		Learning Pathways (IT Staff Development)

Project Manager / Risk Specialist-Banking Risk Management Programme (Regulatory)

Responsible for IT,  Infosec Risk, Control and Audit Management for the Banking Group, managing a team of Risk Analysts and Risk Managers and working closely with Senior IT Management, CIO, Audit, Operational Risk, Enterprise Risk and Regulators.   Responsibilities included Risk Assessment and Analysis, Mitigation Plan Development and Monitoring, Control Assurance, managing Risk within Risk Appetite. Reporting from Management to Board Level.  

Key achievements

-Responsible for a step change in the risk culture and behaviours in IT in respect of Risk Management.
-Developed and implemented an industry best practice IT Risk Management Framework, including Risk and Control Self-Assessment and played a key role in the development of the Banking Group Operational Risk Framework, Tools and RCSA.
-Established a group of Risk Representatives across all domains of IT to establish the framework and identify and assess the organisations IT Risk.  Leading a number of Risk Assessment workshops to achieve this and working in collaboration with internal and external auditors, Operational and Enterprise Risk, Information Security and the Business.
-Played a key role in the securing of £31m from the Board to reduce the Banking Group’s legacy risk position and provided on-going governance of the 3 year programme and reporting of risk position to Board.  Significant reduction in 4 key Legacy Risks.
-Following merger, brought risk management practices and controls up to the same standard within 12 months.
-Developed and delivered Risk Management and Control Assurance Training Programmes for IT staff based on Industry best practice and aligned to Co-operative Banking Group Risk Framework.
-Designed, agreed and implemented a revised Risk and Control Team Structure to effectively manage IT Risk.
-Significant improvements made to the audit process resulting in 60% improvement in audit results across the IT function, with positive feedback from Stakeholders and Audit Function.

IT Risk and Controls Manager

Assignment:  	IT Transformation Programme					

Responsibility for the High Level Design Governance Framework and the Cross Functional Processes (based on ITIL and COBIT Frameworks) for the Target Operating Model, which included the retained IT Function, Service Management Organisation and the Technology/Service Towers.

Key achievements

-Development and approval of High Level Design Governance Framework, including Governance Committee Structure, Roles and Responsibilities, Terms of Reference, Inputs/outputs, Principles, Functions and Governance Processes.
-Mapping and process re-engineering of cross functional IT processes based on ITIL and COBIT Frameworks and identification and documentation of interfaces between the retained IT Function, Service Management Organisation, Technology/Service Towers and the Business.

IT Transformation Project Manager - Governance / ITIL Processes

Citigroup

Led multinational software quality, development and project management function across 13 countries responsible for governance of all EMEA Consumer IT Projects based out of London office.

Head of IT Project Governance, Quality, SDLC EMEA Region

Technology Workstream Lead on the Diners Club Integration Programme.  Responsibility for the integration of the Diners Club Systems and Systems Support from London to Manchester premises, including knowledge transfer and integration and establishment of support processes and procedures.  Following integration, responsibility for the on-going management of the Diners Club Systems.

Technology Integration and Support Manager (Diners Club)

Established an IT and Information Security Risk and Control Function and Framework. 

Formed and managed a team of Process, Risk and Control analysts in supporting the Citi Cards IT Function in the management and assessment of Risks and Controls Regulatory and Legal compliance.

Development, maintenance and compliance of all IT Policies and Procedures. 

Managed relationships with auditors from Head Office and managed the local IT Audit Process.

Sarbanes Oxley Implementation and Compliance.

EMEA Regional Leadership Development Programme for high potential employees, following nomination by the CIO.

IT Governance & Quality Manager

Roles Included:		
Telecommunications Technician
Telecommunications Analyst
IT Technician
Service Desk
Apprenticeship

IT Support And Telecoms Analyst (Associates, acquired by Citi)

I am an experienced leader in Information/Data Governance, Information & Cyber Security and Data Protection, with 27 years’ experience within several sectors, including Financial Services and Education.  I provide professional services in these specialist fields, along with my associates and colleagues, to organisations across the UK and internationally.

I now use my experience to support others with developing their careers in the field, through the provision of apprenticeship training and mentoring.    I am passionate about encouraging and supporting women and individuals from underrepresented groups in embarking on a career in these fields.  I founded the Specialists Hub in 2018 for this very purpose, to support businesses and individuals with access to skills, training and employment in Digital, Tech and GRC.

taplio

The Battle

Elizabeth Smith

Bev McGowan

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?