Ralphael Roberts Download CV
Portrait of Ralphael Roberts

Ralphael Roberts

Cybersecurity · Governance, Risk & Compliance

Turning security requirements into practical action.

View my CV Download PDF
← Back to profile

01 — Work

From security requirements to working tools.

Projects that show how I approach a problem: understand the requirement, build something practical, and explain it clearly. Each entry opens into more detail.

Final-year project · Python / Flask · Academic

Cyber Essentials Mapper

Context-Aware Cybersecurity Compliance Mapping Tool for SMEs

  • Python
  • Flask
  • SQLite
  • Cyber Essentials
  • ISO 27001
  • Agile

A Flask application that turns Cyber Essentials requirements into a prioritised, explainable set of actions for small and medium-sized organisations that lack dedicated security expertise.

My contribution
Designed and developed the platform end to end, applying Agile principles through design, implementation, testing and refinement.
What it demonstrates
Translating frameworks into usable controls, weighted risk scoring, and plain-English explainability for non-technical readers.
Case study: problem, approach and workflow
Problem

Interpreting requirements

Small and medium-sized organisations often lack dedicated security expertise. Turning Cyber Essentials requirements into a clear, prioritised set of actions is where many stall.

Contribution

Designing and building the platform

I designed and developed a Flask-based compliance-mapping application, applying Agile principles through design, implementation, testing and refinement.

Output

Assessments to remediation

Questionnaire-driven assessments with evidence gathering, weighted risk scoring, mapping to Cyber Essentials and ISO 27001, explainable guidance, automated reports and remediation roadmaps.

Illustrative workflow How the application processes an assessment. This is a labelled diagram, not a product screenshot.
  1. 01Questionnaire

    Context-aware questions with evidence capture

  2. 02Weighted scoring

    Automated risk scoring across control areas

  3. 03Framework mapping

    Cyber Essentials and ISO 27001 controls

  4. 04Explainable guidance

    Plain-English reasoning for non-technical readers

  5. 05Reports & priorities

    Compliance report, risk analytics, remediation roadmap

Academic project developed for my BSc. Readiness guidance supports preparation; it does not certify an organisation, and the application is not publicly deployed.

Read about the Mapper

Fortify Insight · Security education · Ongoing

Cyber safety workshops & awareness training

Making cyber safety approachable

  • Awareness training
  • Schools
  • Corporate teams
  • Data protection

Through Fortify Insight I deliver cybersecurity awareness training to schools, businesses and corporate teams, and design age-appropriate cyber safety workshops for primary school pupils covering passwords, privacy and digital safety.

My contribution
Workshop design and delivery; advice on security best practice, data protection and digital resilience.
What it demonstrates
Communicating security to audiences from primary pupils to professional teams.
What the workshops cover
  • Interactive workshops on digital safety, AI responsibility and cyber risk
  • Trauma-informed digital safety strategies for educational settings
  • Advice on security best practice, data protection and digital resilience
Explore Fortify Insight

Business website · HTML / CSS / JavaScript / PHP · Live

Fortify Insight website

A custom site prepared for IONOS Linux web hosting

Fortify Insight logo

A hand-built, dependency-free business website for Fortify Insight: homepage, Cyber Essentials Mapper information page, privacy and terms pages, branded 404 and a PHP contact handler. Prepared for IONOS hosting rather than a hosted site builder.

My contribution
Developed and iterated the site structure, content and styling; prepared the contact handling and hosting configuration for launch, with AI-assisted development for parts of the build.
What it demonstrates
Practical web security hygiene — server-side validation, honeypot anti-spam, security headers — alongside clear communication of a security service.
Build detail and launch preparation
  • Static HTML/CSS/JavaScript with mobile navigation, smooth scrolling and client-side form validation; no frameworks, analytics or third-party form services
  • contact.php handles the contact form: POST only, honeypot field, sanitisation, server-side validation, strict service whitelist and redirects to success or error pages without exposing PHP errors
  • .htaccess configured with a branded ErrorDocument 404, directory listing disabled, security headers and an HTTPS redirect ready for when the certificate is active
  • Sitemap, robots, favicon set and social preview image prepared for the production domain
  • Launch readiness audit: no localhost or build-platform dependencies; all internal links, anchors and assets checked

Status: the Fortify Insight website is live. The Flask Mapper is a separate, later deployment.

Visit Fortify Insight

Personal portfolio · HTML / CSS / JavaScript · Evolving

This virtual CV

A single-page profile designed to be explored, not scrolled

  • Semantic HTML
  • CSS Grid
  • Vanilla JS
  • Accessibility

An evolving personal portfolio built to communicate my professional background and project evidence clearly. It runs as plain static files on the same IONOS hosting as Fortify Insight, with no build step, fonts, analytics or external dependencies.

My contribution
Content, structure and design direction; iterated across several versions with AI-assisted development for layout, code and accessibility checks.
What it demonstrates
Clear information design, responsive layout, progressive enhancement and attention to accessibility.
Design decisions
  • Identity first: portrait and name as the visual centre, with one subject revealed at a time rather than a long scroll
  • Section links such as #work and #background are preserved and work with browser Back and Forward, so a specific subject can be shared
  • Keyboard focus moves to the opened panel; the selected option is announced and visibly marked
  • Without JavaScript, every panel is still reachable and readable through ordinary links
  • Reduced-motion preferences disable transitions; the layout avoids horizontal scrolling on small screens
  • Charcoal, teal and white palette with system fonts and a subtle grid, kept across each iteration

Language learning · Next.js / TypeScript · Prototype

Ik Spreek Nederlands — Dutch pronunciation app

Hear it, break it down, say it, compare

  • Next.js 15
  • React 19
  • TypeScript
  • Web Speech API

A beginner Dutch learning prototype focused on pronunciation rather than translation. It trains difficult Dutch sounds — g/ch, ij/ei, ui, sch and final -en — through listening, sound-by-sound breakdowns, speaking practice and local progress tracking.

My contribution
Concept, lesson sequencing and word data drawn from my own Dutch learning; built with AI-assisted development.
What it demonstrates
Turning a personal learning need into a structured tool, and working in a modern component-based framework.
Implemented features (verified against the project source)
  • Listening: Dutch words and phrases played with browser speech synthesis
  • Sound breakdown: phonetic guides, sound tips and English meaning for each word
  • Speaking and comparison: browser speech recognition captures what you said, or you type it, and a scoring module compares it to the target and highlights likely weak sounds
  • Progress: attempts and “needs practice” items stored locally in the browser — no account or server
  • Routes for pronunciation practice, vocabulary, sound drills, progress, a dictionary, articles and prepositions, with lessons sequenced from first contact to introductions

Status: working local prototype. It is not deployed and has no public URL; speech recognition depends on browser support and falls back to typed input.

← Back to profile

02 — Capabilities

Technology, with people in mind.

Three areas where I can contribute from day one, each backed by specific work rather than self-rated scores.

Governance

Documentation & compliance awareness

  • Mapped controls to Cyber Essentials and ISO 27001 in the Mapper
  • Produced compliance records and documentation in regulated property roles
  • Handled sensitive client information in line with GDPR requirements
Risk & controls

Assessment, scoring & prioritisation

  • Built weighted risk scoring and remediation roadmaps
  • Managed user accounts, permissions and access controls as an ICT Technician
  • Hands-on with Nmap, Wireshark, Kali Linux and Microsoft 365
Communication

Making security understandable

  • Explainability features for non-technical stakeholders
  • Security awareness training for schools and corporate teams
  • Stakeholder management and negotiation from client-facing work
← Back to profile

03 — Background

Experience that connects.

Cybersecurity graduate with First Class Honours, bringing together governance, risk and compliance knowledge, hands-on technical support experience and clear communication to help organisations understand security and act on it.

DegreeFirst Class Honours

BSc (Hons) Cyber Security & Forensic Computing

FocusGRC & information security

Cyber Essentials, ISO 27001 concepts, risk & documentation

CertificateQualys Certified Specialist

PCI & Policy Compliance

PracticeFortify Insight

Security awareness & cyber safety workshops

Professional experience

My route into cybersecurity runs through education technology, regulated commercial work and creative project delivery. The common thread: solving problems, supporting people and handling responsibility.

  1. 2025 — Present

    Cybersecurity Consultant Fortify Insight

    Security awareness and compliance training for schools, businesses and corporate teams; workshop development and advice on data protection and digital resilience.

  2. 2019 — 2022

    Senior Sales Property Consultant & Negotiator Chestertons

    Sensitive client information under GDPR and confidentiality requirements, accurate documentation and compliance records, market analysis and stakeholder negotiation.

    → Confidentiality, records and client trust in a regulated environment.

  3. 2018 — 2019

    Property Consultant & Manager Henry Wiltshire International

    Client engagement in a regulated business, compliance-focused documentation, leadership and commercial awareness.

  4. 2015 — 2018

    ICT Technician Monteagle Primary School

    First-line ICT support across software, hardware and networks; user accounts, permissions and access controls; device deployment and maintenance.

    → Access control and secure, reliable operations in practice.

  5. 2011 — 2015

    Studio Technician / Teaching Assistant Primrose Hill Primary School

    Technology-enabled learning, digital equipment and resources, presentation and stakeholder engagement.

Additional experience as Creative Director / Artist Manager (PropellarGroup / NineofClubsMusic) developed planning, communication and project leadership. Full details are in my CV.

← Back to profile

04 — Currently

What I'm building and developing.

Active work, separate from completed achievements. Status labels reflect the position when this page was last updated, 13 October 2026.

  • Ongoing

    Fortify Insight consultancy

    Delivering security awareness training and cyber safety workshops for schools, businesses and corporate teams.

    Workshop detail in Work
  • Live

    Fortify Insight website

    Custom HTML/CSS/JavaScript site with PHP contact handling, now live on IONOS hosting. Ongoing work is content updates and preparing the Cyber Essentials Mapper as a separate deployment.

    Build detail in Work
  • Evolving

    This virtual CV

    Iterating on structure, accessibility and project evidence as new work is completed.

    Design decisions in Work
  • Prototype

    Dutch pronunciation app

    Next.js prototype for practising difficult Dutch sounds; runs locally and is not yet deployed.

    Feature detail in Work
  • Learning

    Dutch, through self-study

    Continuing from Dutch language studies at King's College London, with the pronunciation app as a practice tool.

    More in Hobbies & interests

Open to cybersecurity, GRC and information security roles. See Contact.

← Back to profile

05 — Hobbies & interests

Away from the job description.

A few of the things I spend time on outside work. They tend to feed back into how I approach it.

Language

Learning Dutch

I began Dutch language studies at King's College London and now continue through self-study. Pronunciation is the hard part, which is why I built a small app to practise sounds like g/ch, ui and ij/ei rather than just vocabulary.

Creative

Music, DJing & creative projects

Before cybersecurity I worked as a Creative Director and Artist Manager with PropellarGroup and NineofClubsMusic, and I hold a Level 3 Diploma in Mixed Media Studies. I still DJ, and music and creative work remain part of how I think about planning, presentation and audience.

Training

Gym & weightlifting

Regular strength training. Progress comes from consistency, good form and small, measured increases — a routine that suits how I approach most things.

Sport

Paddle

Fast, social and a good way to switch off from a screen.

Making

Technology tinkering

I like building small tools to solve a real need — from the Cyber Essentials Mapper to this page and the Dutch app. Trying a framework, shipping a working version and iterating is how I learn best.

Community

Cyber safety education

Helping people stay safe online, especially young people and non-technical audiences, is an interest as much as a job. It shaped the explainability features in the Mapper and the workshops I run through Fortify Insight.

← Back to profile

06 — Contact

Start a conversation.

Interested in my work, or have an opportunity in cybersecurity, GRC or information security? I'd welcome a conversation.

Based in
London, United Kingdom
Open to
Cybersecurity, GRC & information security roles
Email me LinkedIn Download CV Save contact

“Save contact” downloads a vCard with my professional details for your phone or address book.

← Back to profile

07 — References

People who can speak to my work.

Professional referees who have agreed to be listed. Contact details and written references remain private and are shared only after a verified request.

Professional references are available upon verified request.

Referee contact details remain private.

Request a reference
← Back to profile

08 — Testimonials

Perspectives from people who know my work.

Written endorsements from colleagues, clients and collaborators, published only after review and with each contributor's permission.

Recommendations will appear here after review.