Colin Graham

I am an IT management professional with a proven background across several technology disciplines honed from over 25 years’ industry experience. As a hands-on technical manager, I have the line management ability & technical skills required to ensure daily operations run efficiently, as well as the business knowledge and leadership ability to manage and influence teams in realising business objectives whilst applying ITIL principles to achieve alignment with global industry standards.

IT Security Manager – Scottish Power. Glasgow.

 Responsible for the delivery of SP's Corporate IT Security Improvement program across all businesses within the group.

 I manage a team of internal & contracted security professionals working with each of the SP business internal Cyber Security teams of; Renewables, Retail & Distribution, to ensure that implementation of the Corporate IT Security Plan is aligned with each of the businesses main objectives & security strategy roadmap delivering Cyber Security Resilience.  I also ensure that they in turn are aligned to the Groups global security initiatives adhering to global governance standards.  As well as this I ensure that the regulatory expectations of SP are met as an Operator of Essential Services securing Critical National Infrastructure, to remain compliant with NIS(2), ISO standards, PCI DSS etc. by managing annual audit programs with internal & external auditors across our IT & OT estates.  

My team works with internal & external stakeholders to understand the needs of the various software applications as well as with Business, IT Business Managers and Infrastructure Managers on the selection, acquisition, design, development, and implementation of new solutions, functionality, and frameworks.

I continuously develop my understanding of technology trends and the practical application of existing, new and emerging technologies to identify and develop new and innovative capabilities, working with vendors as needed to bring them to life as well as defining high & low-level migration plans to address the gaps between the current and future states, typically in sync with the IT budgeting or other capital planning processes.

BA Information Management

HND Information Technology

Various Professional Certifications