Nathaniel Masinga

Information Security Analyst with over 5 years of experience specializing in GRC frameworks including internal/external auditing. Skilled in delivering governance, risk and compliance initiatives across various sectors such as banking sectors, pharmaceutical and insurance. Strong expertise in successfully implementing IS0 27001:2022, Cyber Essentials +, NIST CSF, PCI DSS, SOC2 and cloud security governance.

Adept at supporting certification readiness, conducting risk assessments, managing third‑party risk and maturing organizational security posture.

Information Security Analyst at Lancashire Insurance Group (Lloyd's Group) (2025-09 – Present)

I have cyber security experience within Fintech/Financial Services: Proven experience in security consultancy, advisory, or GRC roles.

• Cyber Business Analysis: At least 4 years of recent experience in mapping cyber controls and navigating complex project roadmaps.
• Framework Fluency: Deep understanding of ISO 27001/2, NIST CSF, and PCI DSS.
• Cloud & Modern Engineering: A solid grasp of cloud implementations (AWS preferred) and secure development of lifecycle principles.
• Stakeholder Mastery: The ability to challenge and influence developers, architects, and risk officers effectively.
• Proven expertise in ServiceNow platform administration and development, particularly GRC modules.
• In-depth knowledge of governance, risk, and regulatory compliance processes.
• Experience designing workflows and data models in ServiceNow.
• Excellent analytical and communication skills to bridge technical and business perspective

Information Security Analyst at Abbott Pharmaceutical UK (2024-09 – 2025-09)

• Demonstrated strong background in cybersecurity governance, technology risk, or information assurance.
• Experienced in writing, implementing, or managing security policies and control frameworks.
• I demonstrated my ability to interpret high-level security concepts and translate them into usable, pragmatic controls.
• Knowledge of recognised frameworks (e.g., ISO 27001, Cyber Essential Plus, NHS DSPT Toolkit SOC 2) without needing to be tied to specific industry implementations.
• Comfortable engaging with senior stakeholders and presenting risk and security themes with clarity.
• Good understanding of audit processes, risk assessments, and control testing.
• Strong organisational and communication skills with the ability to work independently

GRC Consultant at Royal Berkshire NHS Trust (2021-10 – 2024-09)

• Strong background in cybersecurity governance, technology risk, or information assurance.
• Experience writing, implementing, or managing security policies and control frameworks.
• Ability to interpret high-level security concepts and translate them into usable, pragmatic controls.
• Knowledge of recognised frameworks (e.g., ISO 27001, NIST CSF, SOC 2) without needing to be tied to specific industry implementations.
• Comfortable engaging with senior stakeholders and presenting risk and security themes with clarity.
• Good understanding of audit processes, risk assessments, and control testing.
• Strong organisational and communication skills with the ability to work independently

Information Security Analyst at Capitec Banking and Investment (2019-10 – 2021-09)

• Performed ISO 27001 and SOC 2 internal audits.
• Conducted InfoSec risk assessments, BCP/DR reviews and vendor security checks.
• Investigated incidents and enhanced detection/response capabilities.

BA Degree (Hons) in IT & Social Science