Selected work
Examples of work delivered by Owen Ocean in employed and consulting roles. These anonymised examples demonstrate relevant experience; they are not presented as a portfolio of Ocean Security client engagements.
Group-wide cyber governance, risk and assurance
Environment: Multi-company UK group
Role: Chief Information Security Officer, July 2021–February 2026
Led cybersecurity, technology risk and information-security governance, supporting senior leadership and board-level decisions.
Designed and implemented ISO 27001-aligned controls, policy structures and supplier-assurance processes. Owned risk assessments, risk registers and remediation plans. Structured audit evidence, documented gaps and produced executive risk narratives and decision material.
Resilience, recovery and security operating-model design
Environment: Multi-company UK group
Role: Chief Information Security Officer
Led BCDR strategy, disaster-recovery architecture and resilience planning. Developed SOC capability design, hybrid operating-model documentation and security-awareness activity.
The work connected technology and supplier dependencies with recovery priorities, operating responsibilities and management decisions.
Healthcare technology refresh and clinical continuity
Environment: Independent UK hospital
Role: Consultant Technical Architect, 2019
Supported a multi-million-pound technology refresh covering clinical-system continuity, supplier assurance, Azure and cloud business cases, backup, disaster recovery and infrastructure options.
Produced analytical reports, gap assessments, business cases and technical documentation across virtualisation, storage, Wi-Fi, networking and resilience.
Infrastructure and security roadmaps
Environment: UK business
Role: Consultant Technical Architect, 2020–2021
Delivered architecture, infrastructure roadmaps and security-improvement work across Microsoft, Azure, identity, remote access, RBAC, Active Directory, disaster recovery, data-centre and cloud migration.
Produced HLD/LLD, options analyses, recovery plans and technical guidance for technical and non-technical stakeholders.
Have a similar challenge?
Discuss your required outcome and delivery constraints with Owen: owen@oceansecurity.tech