Steve leads the Information Security and Data Privacy Assurance team for GSK. He is accountable for providing assurance to the Board over the Information Security and Data Privacy enterprise risks. Steve has worked in IT for over thirty years. His background is in software engineering, and for the last sixteen years he has worked in Information Risk Management within GSK. In this time, he has fulfilled different leadership roles, and successfully delivered risk reduction programmes across the business, covering Application Security, Vulnerability Management and Cloud Security. Steve is a curious technologist and a Chartered Fellow of the British Computer Society. He is regular conference speaker and is often asked to sit on expert panels.