Shanai King

GRC Advisory Director // Derby

I joined in 2026 as GRC Advisory Director, helping organisations understand their cyber security and compliance commitments, manage risk and turn requirements into practical, sustainable improvements.

Email me Connect on Linkedin

As Governance, Risk and Compliance (GRC) Advisory Director, I help organisations understand their cyber security and compliance commitments, manage risk and turn requirements into practical, sustainable improvements.

Drawing on more than a decade of experience across consultancy, engineering, cloud security and technical assurance, I help clients identify where change is needed and develop solutions that work for their organisation.

My approach combines technical understanding with commercial awareness. I focus investment and effort where they will make the greatest difference, making cyber security an enabler rather than a barrier.

What can I do for your organisation?

  • Strengthen governance, risk and compliance arrangements so that cyber security supports your organisation’s priorities and regulatory obligations.
  • Assess and improve technical assurance across the design, build and operation of services, helping you identify weaknesses and manage risk.
  • Design and deliver practical improvement and transformation programmes that balance technical rigour with commercial priorities.
  • Develop effective security operating models and capabilities, streamline processes and reduce unnecessary manual effort to improve operational effectiveness.

Experience counts

I have held cyber security leadership roles at Lloyds Banking Group and the Co-op, supporting large-scale security improvements and transformation initiatives. My experience spans technical assurance, engineering, and the design, build and operation of security services.

This breadth of experience allows me to look beyond individual controls and consider how people, processes and technology work together. I use that perspective to help clients turn cyber security strategy into secure, sustainable improvements.

Deeper knowledge

I hold recognised qualifications including CCSP, CISM and ISO 27001 Lead Auditor. Alongside my role at PKF, I teach on the University of Cambridge Cyber Strategy & Leadership Career Accelerator and support participants as an industry mentor.

I am particularly passionate about helping organisations build and evolve security services that are technically robust, operationally effective and aligned with their objectives. I believe the strongest security functions combine deep technical knowledge with practical, commercially focused decision-making.

Personally speaking

Originally from Australia, I enjoy spending my free time walking my dog and exploring the many places the UK has to offer. I’m also a keen food lover, so my weekends are often planned around where—or what—I’m going to eat next.