Ehtsham Ali

Ehtsham Ali has extensive work experience in the field of cyber security and compliance. Ehtsham has held various roles in reputable companies such as Post Office Ltd, PwC, NTT Com Security, and Accenture Technology Solutions.

At Post Office Ltd, Ehtsham served as the Head of Cyber Security Compliance. Ehtsham was responsible for updating the board and Group Executives on the security threat landscape and maintaining the ISO27001 certification. Ehtsham also played a crucial role in increasing audit maturity.

Prior to their time at Post Office Ltd, Ehtsham worked as a Senior Compliance Manager at the same company. In this role, they were the Information Security (IS) lead for Post Office Insurance and provided guidance to the business on security. Ehtsham also maintained the ISO27001 certification and improved audit maturity.

At PwC, Ehtsham held the position of Cyber Security Manager. Ehtsham conducted a SANS Top 20 review for a central government client and successfully implemented and certified an ISO27001 compliant ISMS for a CNI organization. Ehtsham also provided guidance and support to new graduates in the Security skill track.

During their tenure at NTT Com Security, Ehtsham worked as a Security Consultant. Ehtsham implemented a governance and policy framework for a national telecoms company and developed a risk insight tool to assess security posture. Ehtsham also provided subject matter expertise to a media organization impacted by a spear phishing attack.

Ehtsham's earliest work experience was at Accenture Technology Solutions, where they served as a Technical Consultant. Their responsibilities included implementing and maintaining information security and business continuity management systems. Ehtsham also supervised junior staff and led internal and external audits on the ISMS.

Overall, Ehtsham Ali has demonstrated expertise in cyber security, compliance, ISO27001 certification, and risk management through their various roles and experiences in reputable companies.

Ehtsham Ali holds a Bachelor of Science degree in Computer Science from Queen Mary University of London, which they obtained from 2000 to 2003. In addition, they have obtained several certifications, including SOC 2 Compliance Essential Training in 2024, Cloud Security Architecture for the Enterprise in 2023, Certified in Risk and Information Systems Control™ (CRISC) in 2017, SABSA Chartered Foundation (SCF) in 2016, Certified Information Security Manager® (CISM) in 2013, Certified Information Systems Auditor® (CISA) in 2012, ITIL V3 Foundation in 2011, and Certified Information Security Management Principles in 2009.