Leon Cashman

• Founded an independent governance, risk and resilience consultancy supporting
organisations across the UAE and GCC in strengthening governance maturity, operational
resilience and regulatory assurance capabilities.
• Designed and implemented governance and control frameworks that improved
accountability, strengthened assurance activities and enhanced executive oversight of
operational and strategic risks.
• Delivered enterprise risk, compliance and resilience advisory services that enabled clients
to make informed business decisions while improving control effectiveness and regulatory
readiness.
• Conducted independent governance and risk assessments, identifying critical control gaps
and operational vulnerabilities while developing pragmatic remediation strategies.
• Produced executive-level reporting and strategic risk insights that improved visibility of
organisational risk exposure, supplier dependencies and resilience priorities.

• Led enterprise compliance and governance oversight across a £38bn nationally significant
nuclear infrastructure programme, supporting regulatory readiness across 36 regulatory
obligations spanning eight programme functions.
• Established and chaired governance forums involving over 80 senior stakeholders,
strengthening accountability, accelerated remediation activities and improving visibility of
compliance and operational risks.
• Directed preparations for Sizewell Cs first Annual review of Safety and Security,
coordinating executive leadership and senior regulators from the Office for Nuclear
Regulations and Environmental Agency to demonstrate programme compliance and
governance maturity.
• Delivered risk-based assurance reviews that identified control weaknesses, strengthened
regulatory compliance and improved confidence in programme governance
arrangements.
• Produced executive level risk and compliance reporting, translating complex regulatory
requirements into actionable recommendations that supported informed decision making
across senior leadership teams.

• Led cybersecurity governance and third-party risk assurance activities across a multi
billion-pound nuclear infrastructure programme, overseeing cyber risk across 30 strategic
suppliers operating throughout the UK and Europe.
• Conducted more than 30 supplier cybersecurity audits and on-site assessments across
multiple countries, identifying control deficiencies and strengthening assurance across
critical supply chain partners.
• Provided enhanced oversight of six business-critical suppliers, improving visibility of cyber
risk exposure and strengthening operational resilience across key programme
dependencies.
• Embedded cybersecurity governance requirements into procurement and supplier
onboarding processes, increasing assurance coverage and reducing third-party risk
exposure.
• Developed executive cyber risk reporting and supplier assurance metrics that improved
visibility of remediation performance supplier risk and critical operational dependencies.

• Led delivery of 12 technology and infrastructure transformation projects with budgets of
up to £1.5m, supporting approximately 5, 000 users across multiple business-critical
operational environments.
• Directed cross-functional teams of up to 15 personnel, balancing operational, commercial,
security, and technical requirements to achieve successful programme outcomes.
• Implemented governance and reporting frameworks that improved visibility of delivery
risks, programme performance and operational dependencies for senior stakeholders.
• Delivered collaboration and communication technologies that enhanced workforce
productivity, strengthened operational resilience and improved service effectiveness
across three major business sites.
• Led infrastructure optimisation initiatives that delivered approximately 10% operational
efficiency improvements while enhancing service reliability and reducing operational
disruption.

• Led governance and operational readiness activities supporting the introduction of one
critical business service and four key operational services, ensuring compliance, security
and operational requirements were achieved prior to deployment.
• Coordinated readiness activities across three operational teams and 12 key stakeholders,
strengthening governance consistency and improving deployment assurance.
• Developed service onboarding and assurance frameworks that reduced operational risk
and improved control effectiveness during service transition activities.
• Introduced digitised service readiness reporting that increased transparency of
deployment risks and strengthened governance oversight.
• Enhanced service resilience through proactive risk identification and remediation planning,
improving operational readiness across technology and business functions.

• Supported governance and risk management activities across multiple technology and
business change initiatives, ensuring compliance, security and operational requirements
were embedded throughout project lifecycles.
• Introduced structured risk and control checkpoints that improved governance consistency,
strengthened oversight and reduced operational exposure across concurrent programmes.
• Partnered with delivery, operational and technical teams to identify regulatory, security
and business risks early, improving implementation outcomes and control effectiveness.
• Enhanced adherence to change governance standards through proactive assurance and
stakeholder engagement, increasing visibility of delivery risks and supporting informed
decision making.
• Provided governance and risk advisory support to programme stakeholders, strengthening
accountability, improving risk awareness and contributing to more successful change
delivery outcomes.

• Delivered information assurance, operational security and risk management activities
supporting approximately 270 personnel within mission-critical defence environments.
• Conducted security risk assessments and vulnerability reviews across two major
operational deployments spanning more than 20 countries, strengthening protection of
sensitive communications and intelligence systems.
• Supported operational command teams with risk-based decision making in dynamic, high
threat environments where rapid assessment and prioritisation were critical to mission
success.
• Coordinated multidisciplinary teams to ensure secure information flow, effective escalation
and resilient operational responses during live military operations.
• Maintained compliance with stringent military security requirements while safeguarding
operational capability across multiple international theatres.