Governance, Risk, and Compliance Projects
AI Governance, Information Security, and Data Protection
ISO 42001, ISO 27001, ISO 27701, GDPR, NIST AI RMF
Projects
Selected GRC work showcasing compliance and risk.
ISO 27001
Developed risk assessments and controls.
GDPR Compliance Policies
GDPR-compliant policies, data maps, and supporting documentation aligned to regulatory requirements.
NIST Framework Project
Applied the NIST Cybersecurity Framework to assess risks, document control gaps, and support risk-based decision-making.
Education & Certifications
Completed professional training in governance, risk, and compliance, including GDPR, NIST, and compliance program fundamentals.
Experience Overview
I’m looking for a role in GRC. In my current job I use UK GDPR and the Data Protection Act 2018 Outside of work, I’ve taught myself by carrying out ISO/IEC 27001 gap assessments, GDPR compliance reviews and a NIST CSF maturity assessment. I also hold certifiications in lead auditor courses in ISO 27001:2022,ISO 27701:2025 and ISO 42001:2023
Skills
Key Competencies
Governance, Risk & Compliance (GRC)
AI Governance
Risk assessments and risk register management
Compliance documentation and control design
Regulatory compliance (GDPR, ISO/IEC 27001, ISO/IEC 27701 & PCI DSS)
Policy and procedure development
Third-party and vendor risk management
Data protection and privacy governance
Technical & Compliance Skills
GDPR compliance (DPIAs, RoPA, DSARs, breach response)
ISO/IEC 27001:2022 Implementation and documentation
ISO/IEC 27701:2025 Implementation and documentation
PCI DSS compliance documentation
Risk treatment planning and mitigation tracking
Compliance frameworks and control checklists
Audit preparation and evidence collection
Tools & Working Methods
Microsoft Word and PDF documentation
Microsoft Excel and Google Sheets for risk registers and tracking
Structured compliance and policy templates
Documentation aligned with ISO/IEC 27001 and NIST Cybersecurity Framework (CSF)
About Martin Searle
Entry-level GRC and Compliance Analyst with hands-on project experience across ISO/IEC 27001, 27701 and 42001, GDPR, and PCI DSS, gained through self-directed projects and structured training, alongside UK GDPR casework in my current role. Focused on risk assessments, policy development, and compliance documentation, with the aim of helping organisations strengthen governance and regulatory compliance.
Selected Professional Certifications & Training
30+ Hands-On GRC Projects
AI Governance: ISO/IEC 42001 AI Management System build, EU AI Act risk-tier classification, NIST AI RMF applied assessment
ISO 27001: Risk assessments, Statement of Applicability (SoA), ISMS gap assessment and certification readiness review
ISO 27701: PIMS extension, Controller/Processor determination, Records of Processing Activities (RoPA)
GDPR: Data subject rights procedure, breach response plan, compliance review and gap analysis
PCI DSS: Readiness assessment, vendor risk assessment, risk register, incident response plan
NIST CSF / NIST AI RMF: Framework maturity and applied assessments
Third-Party Risk: Vendor assessments and processor due diligence exercises
Policy Development: Information security, access control, data retention and remote work policies
Covering Governance, Risk & Compliance (GRC), ISO standards, GDPR, cybersecurity, information security, privacy, and emerging technologies. Includes training from Skillsoft, GRC Mastery, Mastermind Assurance, and NCFE.
[ISO/IEC 27001:2022 Lead Auditor Training – GRC Mastery](link to Credly badge)
[ISO/IEC 27701:2025 Lead Auditor Training – Mastermind Assurance] (link to Credly badge)
[ISO/IEC 42001:2023 Lead Auditor Training – Mastermind Assurance] (link to Credly badge)
[Cybersecurity Governance, Risk & Compliance – GRC Mastery] (link to Credly badge)
[Regulatory Compliance Specialization – University of Pennsylvania (Coursera)] (Coursera link)
Contact
© 2026 Martin Searle.All Rights Reserved. Certain graphics on this website were created using AI tools. References to the NIST Cybersecurity Framework (CSF) are provided for informational purposes only and do not imply endorsement by NIST or the U.S. Government.
© 2026. All rights reserved.