Michael Somers

Over 18 years’ experience in cyber security, information security and technology, spanning senior leadership, consulting, architecture, GRC and programme delivery across retail, financial services, government, Critical National Infrastructure and regulated environments. Currently Director and Lead Consultant at Sandinista Consulting, delivering interim and fractional CISO engagements and cyber security consultancy. Recent assignments include establishing the cyber security function for the Independent Football Regulator; PCI DSS consultancy and remediation support for Post Office Ltd; ISO 27001 and ISO 9001 implementation and assurance for tombola; and security consultancy within Scottish Government. Previously contracted as PCI DSS Internal Security Assessor for John Lewis Partnership, acting as a subject matter expert across PCI DSS v4, payment architecture, FCA-related requirements and wider cyber security matters. Former Managing Consultant at Cyro Cyber, delivering vCISO and security architecture services across Critical National Infrastructure and major UK rail programmes. Prior permanent leadership includes Head of Cyber Security at CVS Group, where I developed and delivered the organisation’s three-year cyber strategy, security architecture, supplier assurance, risk management and security transformation programme. Earlier spent four years with Nettitude, consulting to more than 120 organisations across financial services, retail, public sector and multinational businesses, and previously led IT and Information Security for CNI provider Open Energi. Former PCI DSS QSA, CISSP and ISO 27001 Lead Auditor, with extensive board and C-suite stakeholder experience.