Mike S.
UK · Director, vCISO, Lead Consultant · Sandinista Consulting Ltd.
University of Northumbria
15 followers
About
Experienced Senior Cyber Security Consultant, Project Manager, and architect with over 18 years of experience delivering innovative security solutions across diverse industries. Specializing in developing robust security strategies that balance business objectives with risk management, regulatory compliance, and operational efficiency. Adept at leading cross-functional teams and managing complex security projects in multi-vendor environments.
Specialties
- CISO / Security Leadership
- ISO 27001
- NIST Framework
- Security Auditing
- Security Strategy
Skills
- Strategy definition and roadmap development
- Programme and Project Management
- Vendor/supplier relationship management
- Contract negotiation
- Stakeholder management (C-Suite)
- Scoping, Gap analysis, and remediation
- PCI DSS
- GDPR / DPA 2018
- Operational Technology
- Security training and culture
17 skills in total
Licenses & Certifications
-
Certified Information Systems Security Professional
ISC²
Issued Aug 2016 · Expires Aug 2028
Experience
-
Director, vCISO, Lead Consultant
Sandinista Consulting Ltd.
Mar 2023 — Present
Personal Contracting Company
-
Internal Security Assessor - PCI DSS v4 (Contract)
John Lewis Partnership
Oct 2023 — Jan 2025
John Lewis Partnership
-
Managing Consultant (Contract)
Cyro Cyber
May 2023 — Oct 2023
Cyro Cyber
24 experiences in total
Education
-
University of Northumbria
MSc Cyber Security, Cyber Security
Jan 2016
-
University of Central Lancashire
BSc (Hons) Computer Network Technology, Computer Network Technology
Jan 2009
Recent posts
It’s that time of year again. Renewing my isc2 CISSP status … can’t remember the last time someone actually asked me to prove I had it. Thought's/ opinions is it still worth it in 2026 when I have 15-18 years provable experience? Genuinely interested.
📅 SAVE THE DATE — BSides Lancashire 2027
Guess who’s back? Back again.
🗓️ 24 March 2027
📍 Lancaster University
This isn't just another conference; 2027 marks the 5th anniversary of BSides Lancashire. What began as a simple pub conversation about uniting the local security community has evolved into a landmark event. For our fifth edition, we’re leveling up to make it the biggest and most impactful year yet.
Prepare for a full day of high-caliber talks, networking, and the unique community spirit that defines the BSides experience. Whether you're here for the technical deep-dives or the legendary hallway track, this is the place to be.
We have a massive roadmap of announcements coming your way—including speakers, sponsors, interactive villages, and workshops.
For now, lock this into your calendar:
🗓️ Wednesday 24 March 2027
📍 Lancaster University
BSides Lancashire is turning 5, and we want you there to celebrate this milestone.
🚀 **Call for Partners:** If you’re interested in or know anyone who could be sponsoring this historic event and supporting the North West security ecosystem, please reach out to myself directly.
Today marks the final handover for my latest Fractional CISO engagement; perfect timing to wrap things up neatly before the August bank holiday weekend.
As we head into the second half of the financial year, my schedule is opening up. I am officially looking for new opportunities to help organisations strengthen their security posture. If your network needs expert guidance across Fractional CISO leadership, PCI DSS compliance, or Cyber Essentials (CE) certifications, let’s connect.
Please feel free to reach out directly or tag any contacts who might be looking for strategic security support! 🛡️✨
Fractional CISO | Cyber Security, Risk & Compliance Consultant
The countdown is officially on: just two weeks remaining on my current contract and only a few days more until I head to Vegas for #HackerSummerCamp! 🎰💻
I’m looking forward to the energy and insights of the week, but once the dust settles, it’s straight back into the hunt for new contracts and career opportunities. If you're looking for a fresh perspective or have a role that needs filling, let’s connect in the desert or right here on the feed.
#CyberSecurity #Infosec #OpenToWork #Networking #DEFCON #BlackHat #FringeEvents