Ulfi Nuraini

National Energy System Operator · Full-time

Warwick, England · Hybrid

Provide cyber security advisory across strategic transformation programmes within the UK energy sector, supporting secure delivery of cloud, digital and operational technology (OT) solutions while balancing business objectives with cyber risk.

• Advising on security architecture for Azure, SaaS and SCADA restoration systems.
• Defining security requirements and conducting security design, risk and assurance reviews.
• Supporting formal risk acceptance and security governance through pragmatic, risk-based recommendations.
• Collaborating with business stakeholders, architects and delivery teams to integrate security throughout the project lifecycle.

FSP · Full-time

England, United Kingdom · Remote

• Insider Threat Technology Mapping: aligned clients’ security tooling (Microsoft Suite and other vendors) with MITRE ATT&CK insider-threat TTPs to strengthen their security posture.
• Technical Lead for a Proof-of-Concept squad: led the POC of an Enterprise Browser to strengthen DLP controls for third-party vendors, contractors and BYOD scenarios.
• M365 E3 & E5 Security Optimisation: built a service to harden Microsoft 365 configurations, boosting compliance across the organisation.
• SIEM Optimisation: improved Microsoft Sentinel operational efficiency and cost-effectiveness against business and security standards.
• Cloud Security Reference Architecture: developed a NIST-based cloud security service for data protection, regulatory compliance and seamless operations.

NTT DATA · Full-time

England, United Kingdom · Remote

• OWASP DevSecOps Maturity Assessment: co-developed a service with the Global Cybersecurity team, now delivered globally.
• ISO 27001 Third-Party Risk Assessment: led the risk assessment process for third-party vendors, ensuring ISO 27001 compliance.
• Global Cybersecurity Taxonomy Strategy: worked with cybersecurity directors to develop a unified taxonomy for clearer communication and strategic alignment.
• Microsoft Purview: led implementation for public sector clients.

NTT DATA · Full-time

England, United Kingdom · Remote

• Enhanced Azure security posture by 70% by implementing CIS Security standards with Ansible automation.
• Strengthened Azure storage security by establishing and enforcing conditional access policies.
• Integrated Azure DevOps Pipelines with Microsoft Teams to streamline communication and collaboration.
• Regularly audited and implemented IAM policies to control access to cloud resources.
• Delivered a cost-saving strategy across 2,000+ virtual machines and 8,000 storage disks, saving the client £2M.