Nikhil John

Governance, Risk and Compliance professional with an MSc in Cyber Security and nearly 2 years of experience ensuring adherence to security policies, supporting risk assessments, and monitoring compliance posture within a large, regulated NHS environment. Practical experience identifying vulnerabilities and risks within IT systems, generating documentation and evidence to support audit collaboration, and translating regulatory requirements into operational practice. Comfortable communicating effectively across technical and non-technical stakeholders in a diplomatic, business-oriented manner, and supporting the development and review of policies and processes.

Working understanding of network security, operating systems, and security best practices, with awareness of frameworks including ISO 27001 and NIST CSF through MSc coursework.

IT Application Support at St George's Healthcare NHS Foundation Trust (2022-08 – 2023-12)

• Ensured adherence to and compliance with security policies and standards across a large, complex healthcare IT environment, monitoring compliance posture and reporting through structured incident tracking in HEAT ITSM.
• Conducted regular reviews of platform activity to identify vulnerabilities and risks, resolving access control and authentication issues and supporting mitigation strategies before they escalated.
• Reviewed and configured application changes to align with updated security rulesets and policies, translating regulatory requirements into operational practice.
• Created and maintained technical documentation and audit trails for escalated incidents within agreed SLAs, generating evidence to support audit and compliance requirements.
• Accessed and handled patient profiles while providing remote support to end users, using Windows Remote Desktop tools to view and troubleshoot user screens in strict compliance with GDPR and NHS information governance requirements.
• Used VMware virtual machines to support, test, and troubleshoot application environments as part of incident resolution and go-live activity.
• Participated in go-live deployments and new feature rollouts, coordinating with technical teams to ensure smooth transitions and minimal disruption to end users.
• Communicated effectively across technical and non-technical stakeholders in a diplomatic manner, explaining findings clearly and supporting the development and review of operational policies and processes.

Invoice Validator at NHS Integrated Care Board (2023-12 – 2024-03)

• Carried out regular checks, validations and reconciliations of financial and invoice data across a full portfolio of third-party systems (Oracle, Broadcare, My Care Bank), ensuring high data quality and maintaining accurate records to support audit and assurance activity.
• Investigated discrepancies in financial records using structured root-cause analysis, identifying and escalating gaps and control weaknesses, and reporting clearly with supporting evidence within a highly regulated NHS governance environment.
• Communicated directly with suppliers to resolve unpaid and historical invoice discrepancies, and by building a friendly, approachable rapport rather than treating those conversations as purely transactional, cleared almost the entire team's backlog of historical invoices before leaving the role.

Administrator - Overseas Recruitment at St George's Healthcare NHS Foundation Trust (2022-11 – 2023-12)

• Maintained policies, procedures, and operational documentation to a high standard, ensuring accurate, complete, and well-structured record-keeping across a fast-moving, detail-sensitive recruitment process.
• Managed sensitive personal data in strict compliance with GDPR and NHS information governance requirements, handling confidential information with consistent discretion and integrity.
• Managed diary scheduling and travel coordination for overseas nursing candidates, working across multiple concurrent timelines and stakeholders to keep recruitment activity on track.
• Ensured third-party suppliers, including recruitment agencies and universities conducting OSCE exams for newly arrived overseas nurses, were paid correctly, by verifying the accuracy of invoices submitted ahead of payment.

Online Assistant at J Sainsbury's PLC (2020-02 – 2022-07)

• Fulfilled high-volume online orders accurately in a time-critical environment, consistently meeting daily operational targets and maintaining customer satisfaction standards.

MSc in Cyber Security – Northumbria University London (2021-07)

BE in Computer Science and Technology – Anna University (2017-11)

12th Grade in Computer Science and Mathematics (2012)