Harry W.

About

I help B2B services firms turn security and AI governance into a competitive advantage — not a compliance checkbox.

Over the past 20+ years I've built and run enterprise-grade information security, cybersecurity management and AI governance programmes for organisations ranging from a €75BN global credit-asset manager to the UK's public spending watchdog. I now bring that same depth to growth-stage and scale-up B2B firms as founder of GRCMANA, an AI-native cybersecurity and GRC advisory practice built to reduce risk, build resilience and accelerate trust with your customers, regulators and investors.

What I do best:

• Fractional CISO & security leadership — I own security strategy, governance and risk management end-to-end, so you get board-level security leadership without a full-time hire.

• ISO 27001, SOC 2 & NIST CSF readiness — I build security policies & procedures from scratch, run security assessment & testing, and get you to audit-ready compliance.

• Cloud security & security engineering — I architect security infrastructure across Azure, AWS and GCP, from Zero Trust and cloud security to vulnerability assessment.

• AI Security & AI governance — I apply ISO 42001, the EU AI Act and NIST AI RMF to make AI adoption defensible, not risky.

• GRC engineering & security automation — I design continuously monitored, evidence-based compliance workflows in place of spreadsheet-driven audits.

Recent proof points:

• Built a 24x7x365 global SOC from zero to $30M ACV within 12 months, leading a team of 30+ security engineers.

• Held full P&L accountability for information security across a €75BN credit-asset manager operating in 7 markets, reporting to the Group CEO, Board and Risk Committee

• Delivered SOC 2 Type I & II certification that directly unlocked $2.3M ARR in new client contracts

• Cut attack surface by 80% and incident response times by 90%, and held ISO 27001 certification with zero non-conformities across 3 consecutive audit cycles

If you need a security or AI governance leader who can walk into ambiguity, build the programme, and own the outcome, let's talk.

Specialties

• AI / ML Security
• Cloud Security Architecture
• Governance & Compliance
• Risk Management
• Security Strategy

Skills

• governance
• risk management
• compliance
• iso 27001
• iso 27002
• iso 27005
• iso 31000
• soc 2
• nist cybersecurity framework
• gdpr

62 skills in total

Experience

• Managing Consultant

  GRCMANA

  Feb 2026 — Present

  London, United Kingdom

• Global CISO

  Pepper Advantage

  Jun 2024 — Oct 2025

  London

• Global Head of Cyber Defence

  rackspace.com

  Jul 2022 — Jun 2024

6 experiences in total