Exploring Data Protection Careers at NormCyber: Isabella Gibson’s Journey

Discovering NormCyber: A Leap into the Unknown

When Isabella graduated during lockdown with a degree in biology, the cyber security world wasn’t on her radar. “I had no background in cyber security or data protection,” Isabella admits. Yet, the appeal of joining a smaller organisation with a structured graduate scheme caught her attention. The program offered rotations across departments, providing a unique opportunity to explore the inner workings of NormCyber. “I liked the idea of an entry-level role where I could learn everything from scratch,” Isabella says. The structure promised both breadth and depth, with the freedom to explore various functions of the business.

From Rotation to Realisation: The Graduate Scheme Experience

NormCyber’s graduate scheme is designed to give participants firsthand experience across multiple departments. Isabella completed three rotations:

1. Sales – where she learned about customer engagement and business development.
2. Customer Experience – which involved operational insights and client relations.
3. Data Protection – the area where Isabella eventually found her niche.

Each rotation provided a mix of mentorship and autonomy. “In every team, I was thrown into real work straight away, which helped me build confidence quickly,” she explains. Whether it was setting sales targets, managing client accounts, or delving into data compliance, Isabella was encouraged to take ownership of tasks from day one. This immersive approach exceeded her expectations. “I didn’t know if Norm would be a long-term fit,” she shares, “but by the end of the scheme, I was confident that data protection was where I wanted to be.”

Specialising in Data Protection

Now a Data Protection Associate, Isabella works directly with clients to help them improve their compliance landscapes. Her role combines proactive guidance with reactive problem-solving. “I meet with clients regularly, address their queries, and work on action plans to enhance their data protection strategies,” she says.

Transitioning into the data protection team required no formal prerequisites, thanks to the support of Robert, an experienced lawyer that heads up Legal Services at NormCyber. “Robert has been instrumental in my development,” Isabella explains. Through informal training sessions and ongoing guidance, she’s been able to deepen her knowledge in a practical context.

Building Expertise: Training and Qualifications

While much of Isabella’s learning has been on-the-job, NormCyber has supported her in pursuing certifications to bolster her expertise. To date, she has achieved:

• UK GDPR Practitioner Certification
• Certified Information Privacy Manager (CIPM) through the IAPP

These certifications enhance her credibility with clients and align with her long-term aspirations. “I’d like to add more qualifications,” Isabella says. “It’s about presenting myself as a well-rounded professional, both to clients and within the team.”

A Culture of Growth and Support

One of NormCyber’s standout features is its commitment to personalised development. Isabella highlights the bi-weekly one-on-one sessions with Robert, where they review her progress and identify areas for growth. “It’s not just about ticking boxes; we focus on what I need to feel confident in my role,” she notes.

This collaborative approach extends to staying ahead of industry trends. As topics like AI and new compliance standards emerge, Isabella and Robert learn together, ensuring their advice to clients remains relevant and informed.

Looking Ahead: Aspirations and Evolution

For Isabella, the future is about continuing to grow within data protection. “I feel confident in my understanding of the role and the subject matter, but I want to expand my qualifications to further solidify my expertise,” she says. With NormCyber’s support, she’s optimistic about achieving these goals.