Nima Mostoufi

I am a compliance and risk management professional with over 10 years of experience in Health, Safety, Quality, Environmental, Business Continuity and Information Security Management Systems, leading ISO certifications, managing risk, and driving continuous improvement in regulated environments.

Information Security Compliance Officer at M Group (Services) Ltd (2023-12 – Present)

• Management of the certified ISO 27001:2022 system.
• Information security risk management.
• Incident investigations.
• Implementation of business continuity plans.
• Conducting internal audits.
• Supplier security and compliance assessments.
• Delivering training and raising awareness on information security across the organisation.

Head of Compliance at Waste Managed Ltd (2022-05 – 2023-12)

• Oversaw GDPR compliance as Data Protection Officer.
• Created management systems in line with ISO management systems (14001, 45001, 27001, 22301).
• Gained and managed the certified ISO 9001:2015 Quality Management System.
• Chaired risk management and compliance meetings.
• Delivered training on data protection and IT security.

Compliance & Risk Manager – QHSE, Information Security, and Business Continuity at Morrison Data Services (2018-08 – 2022-05)

• Designed and implemented ISO-compliant policies, ensuring 100% certification retention across all standards.
• Managed risk and compliance systems.
• Information security risk management – risk management policy and procedure ownership, defining and ongoing monitoring of objectives, risk assessments, monitoring of risk levels and actions, monitoring of risk impact and likelihood parameters, review of risk treatments and associated plans, updating management on results of risk assessments.
• Risk management workshops with senior managers/risk owners.
• Led compliance aspects of client tenders.
• Developed and delivered continuous training programs, maintaining high standards of health, safety, and environmental practices.

International Health, Safety, Quality, Environment Auditor at Achilles Information Limited (2015-05 – 2018-08)

• Conducted in-depth audits of global suppliers/contractors.
• Evaluated and improved management systems in health, safety, quality, environment, and corporate social responsibility.

Health and Safety Representative at Northumbrian Water, UK (2010 – 2015)

• Led incident investigations and safety audits, resulting in a 40% reduction in workplace accidents.
• Developed and updated health and safety procedures, ensuring ongoing compliance and continuous improvement.

Network Performance Coordinator at Northumbrian Water, UK (2006 – 2010)

• Data analysis related to water leakage detection.
• Water leakage reporting to OFWAT.
• Per Capita consumption analysis.

BSc (Hons) in Mathematics

A-Levels in Mathematics, Physics, Chemistry

• NEBOSH National Diploma in Occupational Health and Safety (Credit)
• IEMA Foundation Certificate in Environmental Management
• IRCA ISO 9001:2015 Lead Auditor
• ISO 27001:2022 Implementation
• DVMS Cyber Resilience Professional Foundation - NIST Cyber Security Framework Foundation
• PECB ISO/IEC 27005 Risk Manager