John Duminy

I am passionate about and have more than 30 years ITC including Information Security Management experience. I am currently contracted as a Senior IT GRC Manager at UCT reporting to the ICTS Director: Governance Support Services. Previously I was contracted at Woolworths as an IT GRC Specialist responsible for Threat & Vulnerability Management with a key focus on assisting Woolworths to implement PCI requirements and maintaining annual compliance. I have used the COBIT, NIST, CIS & ISO27001 frameworks extensively to implement Information Security best practice and requirements.  I am well skilled at writing policies, standards and procedures and performing risk assessments including risk remediation and coordination.  My management experience includes roles as CISO and managing teams.