Matt Moon

Background

About Matt Moon

A member of the Security Institute and the Business Continuity Institute, I have a First Class Honours Degree in Organisational Capability Development and spent 25 years leading security risk management and building organisational resilience to safeguard key sites and capabilities, on behalf of the UK Ministry of Defence (MoD). Adept in Information Assurance, Business Continuity and Crisis Management, I am well-versed in devising robust policies and plans, conducting site surveys and leading audits to minimise risk and maintain compliance with ISO 22301, ISO 27001 and JSP440. I gained extensive experience in policing and security roles before being appointed as Protective Security & Resilience Manager at a major MoD transport hub for global flights. During my tenure, the organisation was recognised as the top-performing establishment for security and resilience compliance. I have led counter-intelligence investigations and managed security risk management and resilience activity, mitigating risks to MoD sites in the UK and overseas, working in partnership with international law enforcement and security agencies. In 2021 I was invited to become a Professional Assessment Board Member for the Ofqual regulated ISMI® CSMP® course, after finishing in the top 5% of all candidates, since its inception. In 2022 I left the MoD to join Horizonscan Ltd as Senior Resilience Consultant. I delivered high-quality risk management and business continuity advice, training, and consultancy in a hands-on client-facing role. I worked with a diverse, multinational client portfolio spanning sectors including finance, manufacturing, construction, higher education, and local government. I continue to work with Horizonscan as an Associate Senior Resilience Consultant. In 2024 I joined KBR as Senior Information Risk Advisor. Leading a collaborative approach to Information Security, I work closely with cross-functional teams to identify, assess, and mitigate risks associated with information assets. My expertise lies in developing and implementing robust GRC frameworks that align with organisational goals, ensuring compliance with industry standards and regulations while safeguarding sensitive data. My areas of expertise are: Corporate Security | Physical, IT & Cyber Security | Counter Terrorism | Information Security | Site Security Surveys | Threat Assessment | Technical Security Systems | Policy Development | Emergency Planning | Business Continuity | Crisis Management | Auditing & Compliance