Kevin P

Enterprise Lead – Corporate Security, Privacy & Governance

Aug 2021 - Present • 5 yrs 1 mo

● Accountable for enterprise-wide security, privacy, and governance across global operations (~1,400 employees), with ownership of control architecture across product, corporate, and manufacturing environments ● Designed and operationalised an integrated ISMS, consolidating fragmented controls into a unified, audit-ready governance system ● Serve as primary advisor to executive leadership on security posture, compliance exposure, and audit readiness, informing system-level decision-making ● Repositioned vulnerability management from a reactive function into a structured governance process, reducing backlog by >95% and establishing sustained remediation discipline ● Established organisation-wide security adoption as an operational control layer, increasing training completion from <75% to >99% and embedding policy into execution ● Stabilised enterprise control environment to support audit readiness, operational scale, and external scrutiny.

Senior Program Manager, Information Security

Aug 2020 - Jul 2021 • 11 mos

● Owned end-to-end ISMS and SOC 2 Type II programme delivery, restoring audit timelines and stabilising compliance execution during delivery disruption ● Reduced systemic vulnerability backlog from >6 months to <3 months by restructuring remediation workflows and enforcing accountability mechanisms ● Assumed control of a delayed external audit within 30 days, re-establishing delivery cadence and stakeholder confidence

Program Manager, Data Privacy

Aug 2018 - Jul 2020 • 1 yr 11 mos

● Designed and implemented a company-wide ISMS aligned with HIPAA and PCI requirements, establishing foundational governance infrastructure ● Led organisational readiness for first external audits, embedding control structures and compliance processes across operations ● Strengthened enterprise security posture during rapid growth, supporting funding readiness through improved governance maturity