MIWIC25: Jess Matthews, Compliance Governance Officer at Acacium Group

What does your job role entail?

I am responsible for overseeing Digital Technology Assessment Criteria (DTAC) compliance to ensure our services meet and exceed the UK’s National Health Service’ (NHS) baseline in technical security, data protection, clinical safety, interoperability, usability and accessibility. In this capacity, it requires me to liaise with a variety of stakeholders across the business and third parties.

I also lead on clinical safety across 11 services – cardiology, dermatology, lung health and more – to ensure that our digital services meet DCB0129 and DCB0160 standards in clinical risk management. The role requires external engagement with clinical risk management experts and internally up to board-level with the Group’s Global Clinical Director.

In addition, I also manage the penetration testing programme and liaise with a third-party to conduct assessments. I also assist my Information Security team in audits and compliance, such as ISO27001, Cyber Essentials and Cyber Essentials Plus, the NHS’ Data Security and Protection Toolkits, PCI DSS, supplier security questionnaires for bids, as well as security operations and incidents when required. Overall, my position is very broad-based and provides me the opportunity to gain a richer understanding of the digital services that we offer to customers. In doing so, it allows me to have a holistic picture which goes beyond solely security and takes into consideration the multifaceted nature of how products are developed, operations are managed and how businesses rely on a vast array of perspectives to deliver truly exceptional services for patients.

How did you get into the cybersecurity industry?

I am career switcher who did not begin within the cyber security industry. In a former life, I worked in Brussels at the European Parliament and the public-private partnership, Clean Aviation where I was incredibly fortunate to explore my keen interest in EU affairs, geopolitics, aerospace and aviation.

However, as a Brit whose professional and personal life was uprooted as a result of Brexit. I found myself at a crossroads which I did not foresee. I explored this more fully in my talk, “Brexit to BSides: My Personal Journey Into Security” at BSides Bristol in 2024, where I outline how much of an impact it had on me and forced me to reevaluate.

In a nutshell, I returned to the UK to write the next chapter of my life. It brought me to a team where I was surrounded by project managers who worked across technology and transformation. It was security that captivated me. However, I knew that I needed to enhance my knowledge in technology.

Therefore, I enrolled on a full-stack web development course which gave me a grounding in front-end, back-end, APIs and programming languages. Needless to say, I knew that I was never going to be the best developer in the world, but I knew security still grabbed my attention.

Fast forward and I am in my current company. It was the 8th of March 2022, International Women’s Day, where I received an email on a job shadow scheme from the internal Women in Technology & Transformation forum. I applied and expressed my interest in cyber security. It was not long before I was paired with the Group Head of Information Security and shotly transferred into the Information Security team afterwards. It has been a whirlwind of upskilling and fully embracing the industry ever since!

What is one of the biggest challenges you have faced as a woman in the tech/cyber industry and how did you overcome it?

For me, it has been less in terms of what challenges I have faced as a woman in the tech/cyber industry and overcoming that. It has been more that I am a career switcher, so the biggest challenge I have faced is having the confidence in my transferable skills which I bring from my former life and translating them into an environment where I can be effective.

If anything it has been challenges of my own making. The challenge of proving myself to my team, colleagues, peers and most of all: myself. Initially, it was daunting as security is awash with acronyms and many have prior knowledge of IT or “technical skills”. I would be lying if I said that I started the role in the Information Security team and I was 100% sure-footed that I made the right move. It was a leap of faith that brought me there after all.

However, not long into the role and my confidence started to grow. I found myself able to build rapport with teams quickly, absorbed in daily tasks and my appetite for security only increased. The challenge was me, so once my mindset started to change and I soon found myself in a position of exploring communities: in my local area, women’s groups and other avenues, where I could connect with as many individuals as possible who are as passionate about security and mission-driven as I am.

It is only the challenge of getting out of my own way and trusting in my abilities, as well as with the support and encouragement of the community is where I truly believe I have been able to overcome it. It is not to say this won’t rear its head again, but I feel better equipped to manage it.

What are you doing to support other women, and/or to increase diversity, in the tech/cyber industry?

Currently, I am in the leadership team of Women in Cybersecurity (WiCyS) UK & Ireland Affiliate. It is a privilege to be a part of WiCyS UKI, where I feel incredibly humbled to volunteer alongside women who are deeply passionate about its mission: building a strong gender-diverse cyber security workforce that facilitates the recruitment, retention and advancement of women in the field. It is community which I truly value and proud to dedicate my time to benefit WiCyS UKI members.

In January 2025, I co-founded Defend Together CIC whose mission is to build communities in the South West and beyond. Defend Together is the home of Firewalls & French Toast, Cyber Cinema and CSIDES.

Firstly, Firewalls & French Toast is a brunch meetup for women in cyber security in Bristol, which is open to anyone regardless of their experience level or if they are looking to pivot into the industry. It is opportunity for women to connect in the wider South West region.

Similarly, Cyber Cinema is a community initiative in Bristol and is open to anyone with an interest in exclusive screenings of cyber-related films at a local cinema, with an opportunity to network afterwards. The first screening of the Hackers was a roaring success and we cannot wait to do it again in April with Wargames.

Lastly, CSIDES is an upcoming event due to launch on the 3rd of October 2025 and will first be held at the coastal town of Weston-super-Mare, UK on the Grand Pier. CSIDES’ mission is to adapt the model of BSides and bring the event to coastal communities which are historically underrepresented. It will be an opportunity to engage local residents, businesses and the industry alike, with a view to bringing CSIDES to a UK coastal town near you!

Who has inspired you in your life/career? 

I feel incredibly fortunate to have been graced with so many inspirational individuals in my life. It is not possible to capture them all who here, but the following have left an undeniable mark on me personally and professionally too.

Firstly, Jo Matthews. My mother is an endless source of inspiration to me and has laid the foundation for where I am today. The values that she has instilled in me and ability to support me at my highs and lows, it has grounded me and acts a reminder that no matter what challenges life may bring. It is how you rise to the occasion.

For all the pivotal moments in my life, my mother has been by my side. I will forever be indebted for her sacrifices and I am so proud to be your daughter.

Secondly, Hazel McPherson. I had the pleasure of meeting Hazel when I signed up for the Women in Tech and Cyber Hub’s (WiTCH) Tech Trailblazer group mentorship last year. Although it has formally ended, where I have gained a friend in Illyana Mullins, Colette King and Hazel McPherson who all kindly offered their time as mentors.

In Hazel’s case, I discovered she lived in the same town as me. It was only a matter of time before there was a meeting of the minds and we co-founded Defend Together.

For anyone who does not know Hazel, she is an incredibly passionate advocate of community who is not only a Director of BSides Bristol, but continuously offers her time for so many within the industry. Not only with her insights as a CISO and her journey within the industry.

Hazel displays strength in her vulnerability and selflessness. She is a friend to so many and inspires me daily. Please do not ever change!