Christine Maxwell

Responsible for leading the Cyber Security relationships for a number of global organizations including clients in the Energy and Technology sectors and a UK government department. Overall accountability for the delivery of cyber security services to these clients. Led KPMG’s response to the UK Government’s Network and Information Systems Regulations including collaboration with multiple Competent Authorities. Leader of Strategy, Transformation and Governance services including modernization of third-party security management and introduction of new operational technology security services.

Role involves leading a team of 20+ GRC professionals, leading Board and Executive reporting and acting as Deputy CISO. Role involved transforming and modernising security assurance, compliance, policy and risk management. It also involved taking on the challenges brought about through the increasing volume of legislation and regulation in cyber security, including NISD and GDPR, and a focus on being able to recover from cyber security incidents.

Joined BP to support transformation of cyber security within the Group. Role involved leading policy and governance, transforming supplier security and positioning cyber security risk with Boards and Executive committees. Took on the role of Deputy CISO which incorporated wider Chief of Staff tasks including skills leadership and wider team management.

New role, post a re-organisation, to provide focus to the Governance, Risk & Compliance domain. Continued to act as Deputy CISO and lead of all Board and regulatory reporting. Role focus was on driving to become top quartile in Information Security, Payment Security and Records Management policy, assurance and awareness. Took on leadership of PCI DSS transformation team.

Joined RBS to support the transformation of the Information Security team in the UK and Ireland. Role involved engaging on all large projects the Group was involved in to support the implementation of the right security controls and managing associated security risks. Role also involved developing an information security threat management approach, leading a team who managed security incidents and managing security policy and associated risk managment activities.

Primarily in the Telecoms, Media and Tech sector clients delivering IT Risk & Control and security consultancy projects