Andy Law

Background

About Andy Law

Security Expert | Cybersecurity Strategist | ISO27001 Specialist | Risk Assessment SpecialistDedicated to safeguarding organisations against evolving cyber threats, I bring over a decade of experience across government and private sectors, leading network migrations, endpoint protection initiatives, and large-scale security transformations. I specialise in building resilient information security frameworks, conducting risk assessments, overseeing audits, and fostering a culture of security awareness and proactive risk management.In my current position, I lead information security assurance and governance, ensuring alignment with ISO 27001, UK GDPR, NIST CSF, FCA, PRA, and all payment scheme requirements. I provide GRC oversight of cyber security projects, guide SecOps teams in monitoring and incident response, and drive regulatory compliance and operational resilience. By combining strategic oversight, trend analysis, and security-by-design practices, I help organisations anticipate and mitigate emerging threats while safeguarding critical assets and sensitive data.