James Rooke

Leading a portfolio of security, risk and commercial projects across the enterprise, combining agile delivery with strategic alignment in a regulated aviation environment. Increased cabin baggage revenue by 10%, generating £6.5m annual uplift through a new surcharge and attach-rate strategy Delivered a federated third-party access model, completing discovery, SOW and roadmap to strengthen identity controls at scale Integrated Microsoft Security Copilot with Splunk, streamlining threat triage and incident response to reduce mean time to restore Rolled out Jira and agile governance across teams, improving visibility, stakeholder alignment and cross-department responsiveness Implemented Riskonnect (Salesforce) as the enterprise risk platform, defining KPIs, governance and dashboards for executive oversight Directed Microsoft 365 service governance across Azure AD and Entra ID, managing release cycles, SLA monitoring and knowledge updates

Brought in to lead a high-priority cybersecurity reporting programme for the CISO, improving visibility of real-time threats across global operations.

Delivered a proof of concept for real-time threat dashboards, surfacing attack and incident trends for senior decision-makers Built an international communication and engagement plan to support rollout and incident-response readiness Led cross-functional discovery and produced BRD and PID to align scope, risk and budget with business goals Worked with C-level stakeholders to define success criteria and ensure alignment with organisational security needs Completed full project closure after POC stage when funding was withdrawn, ensuring governance and documentation were delivered in full

Led a global transformation programme to modernise CRM, ERP and data platforms on Microsoft Dynamics 365, delivering secure cloud-first architecture, IAM maturity and enterprise-wide process improvements.

Migrated legacy Dynamics CRM 3.0 to Azure-hosted D365 CE, creating a secure, evergreen platform with improved compliance and scalability

Designed and implemented a role-based access model, including privileged access profiles, RBAC testing and ISO 27001-aligned review cadence Integrated Entra ID (Azure AD) SSO and RBAC controls across CRM, ERP and SharePoint to strengthen IAM posture and privileged access management Aligned SharePoint governance with CRM permissions, introducing classification, approval workflows and audit-ready document lifecycle controls Migrated on-premises data warehouse to Azure Data Lake, improving reporting quality and enabling cross-system analytics across Finance and Operations

Partnered with the CMO to re-engineer campaign and sales pipeline workflows, aligning CRM capability with global growth strategy

Defined enterprise data quality controls, improving completeness, conformity, and duplication rates across D365 and SharePoint

Embedded Agile and SDLC governance, introducing sprint-based reporting, milestone tracking and structured release management

Established ITSM processes in line with ITIL, including incident, change and request workflows, supported by a knowledge base and SLA-backed service catalogue