GRC
Cyber GRC
Governance frameworks, risk management programmes, ISO 27001, NIST, and regulatory compliance. Pragmatic controls that match the business.
Senior cyber advice, built for companies that need clarity.
Strontian Ltd was founded by Lee Johnson, a CISSP accredited cybersecurity practitioner with deep hands-on experience across governance, risk, compliance, IAM architecture, and programme remediation.
About Lee Johnson
Pragmatic security leadership for regulated environments.
Lee has led security programmes inside regulated organisations — environments where audit findings, regulatory requirements, and board expectations do not wait.
He knows what good looks like, what is reasonable to ask of a business, and what is a genuine risk versus noise.
MastercardAXAVodafoneNEST
FIX
Programme Remediation
Audit findings, incident follow-up, board-directed security uplift, stakeholder management, delivery discipline, and evidence.
IAM
IAM Security Architecture
Identity and access management, zero-trust strategy, PAM, access governance, and target-state architecture.
Why Strontian Ltd
Security advice should make action easier.
Strontian Ltd is not a generalist consultancy. It is a focused practice built on the belief that most SMEs are underserved by the cybersecurity industry — the advice is often too technical, too expensive, or too vague.
- Security advice should be actionable.
- Fixed-scope diagnostics build trust faster than open-ended billing.
- You do not always need a full-time CISO — you need the right person for the right number of days.
Let's talk about what security looks like for your business.
Start with a short enquiry. No pitch, no pressure.