Yasser M.

I help boards and executive teams turn cyber risk into clear business decisions, and then build the security capability to act on them. I currently lead cyber security for a £35bn critical national infrastructure capital programme at National Grid. I act as Delegate CISO for the business unit and lead a team of 14 security architects. When I joined, the business unit was newly formed and I was its only cyber professional. I built the function from first principles, removed the governance friction that was slowing delivery, and set up a secure-by-design framework that is now used on 100% of projects. My remit covers the whole asset lifecycle, from planning and design through to energisation and commissioning. It also includes supply-chain assurance across principal contractors and joint-venture partners. Before this, I advised the National Energy System Operator, National Grid and the NHS on security architecture, cloud governance and regulatory compliance. Earlier, I ran multi-site IT operations for Marriott International. That range means I work comfortably with the boardroom, the engineering floor and the supply chain alike. How I can help Fractional or virtual CISO services and board-level cyber risk advice Security strategy, target operating models, and building security functions from scratch Zero Trust, IAM, and Azure/M365 cloud security architecture OT/ICS and critical infrastructure security (IEC 62443, NIS2, NIST CSF 2.0) Cyber assurance for third parties and the supply chain ISO 27001/27017/27018 readiness, secure-by-design, and architecture reviews (SABSA, TOGAF, STRIDE, MITRE ATT&CK) Credentials: C|CISO, CISSP, CISM, GIAC (SANS), Microsoft Certified: Cybersecurity Architect Expert. Member of the GIAC Advisory Board. I work best with leadership teams that want practical, defensible decisions rather than reports that sit on a shelf. You get clear advice, measurable outcomes, and controls your business can actually run.