Peter Farrell

Senior Cyber GRC & TPRM & AI Governance Lead (Contract) dmg media · Contract Feb 2026 - Present · 7 mos London Area, United Kingdom · Hybrid Rebuilt a risk-tiered vendor security-assurance framework, clearing an inherited backlog of 40+ high-risk vendors in eight weeks and closing 15+ critical control gaps across ISO 27001:2022, UK GDPR, NIS2 and CIS Controls. Reduced average vendor-assessment cycle time by approximately 30%, from 21 to 14 days, through a rebuilt risk-tiered methodology. Built the organisation’s first AI risk-assessment and control framework for editorial and operational use cases; mapped EU AI Act deployer obligations and Article 14 human-oversight requirements across 5+ active AI initiatives and three business divisions. Created ISO 27001:2022 and UK GDPR audit evidence packs and a 20-metric compliance dashboard used by senior leadership for InfoSec posture and audit-readiness reporting Hamilton Insurance IT GRC Manager (DORA, AI Governance, Model Risk, TPRM, Operational Resilience) Hamilton Insurance · Full-time May 2025 - Dec 2025 · 8 mos London Area, United Kingdom · Hybrid Built an ISO 42001-aligned AI management system and model-risk framework from zero maturity across eight business units, including model inventory, validation oversight, risk tiering and acceptable-use controls for M365 Copilot, enterprise GenAI/LLMs and underwriting AI. Identified and risk-tiered 15+ unsanctioned AI tools through browser telemetry, SSO logs and SaaS-licensing data; developed third-party AI risk methodology covering model transparency, output reliability, data leakage and responsible-AI controls. Designed major ICT incident notification workflows