Experience

Arrow Global Group

• United Kingdom
• Financial Services
• 300 - 400 Employee

• Group Senior Information Security Manager

  • Feb 2022 - Present

• Group information Security Manager

  • Jan 2020 - Feb 2022

• Information Security Manager (Portugal & Netherlands)

  • Feb 2018 - Jan 2020

• Information Security Manager

  • Jun 2016 - Feb 2019

  Responsibilities include supporting the architecture, implementation and on-going maintenance of the information security programme. Design, build, configure and evidence security controls in accordance with industry standards, PCI requirements and FCA regulation. Manage and develop risk assessments against a contract driven vendor relationships□ Assist with enterprise wide risk assessment procedures, internally and third-party vendor oversight□ Information Security architecture design of Infrastructure, application and outsourced services□ Monitor, assess and apply corrective actions to the IT platform and third-party data handlers□ Assess InfoSec risks of new services and projects, understanding of advanced security protocols and standards.□ Solid understanding of security principles, standards, practices and policies□ Interact with junior InfoSec analyst, InfoSec Manager and wider IT and Change team. Collaboration with IT, Risk and Compliance teams□ Reduce risk and scope of PCI and Cardholder Data Environment across the Group.□ Assist in all IT audits, risk assessments and regulatory compliance□ Promotion of awareness of applicable regulatory standards, upstream risks and industry best practise□ Expert knowledge of DLP, at rest and in transit for sensitive data controlled by the business□ Security risk, vulnerabilities, scanning tools, security patching, anti-virus and malware controls. Endpoint security, database security, cloud security□ Assist with IT and InfoSec strategies for growing Group platforms□ Practical implementations of networking devices, IPS/IDS, Firewalls and SIEM technologies□ Disaster Recovery and Business Continuity analysis□ Mobile Device Management□ Business system threat and attack vector analysis□ Incident Response□ Policy writing / review and implementation



Serco

• Information Security Manager

  • Aug 2012 - May 2016

  Ensure the ongoing integration of information security with business strategy and operational deliveryEnsure that the access control, disaster recovery, business continuity, incident response and risk management needs of the organisation are properly addressedLead Information security awareness and training initiativesPerform ongoing information risk assessments and audits to ensure that information systems are adequately protected and meet all contractual, statutory and regulatory requirementsWork with vendors, outside consultants, clients and other 3rd parties to improve information security across the estate of services and stakeholdersLead an incident response team to investigate contain and prevent future security breachesWork with internal compliance teams and IT to maintain ISO 27001 and PCI DSS certifications Complete all due diligence material for prospects and clients and maintain a library of documentsWork alongside the IT team to ensure that any gaps within the business are closed out with minimal risk to the business



The Listening Company

• United Kingdom
• Outsourcing and Offshoring Consulting
• 100 - 200 Employee

• IT Site Support Manager

  • Jan 2010 - Aug 2012

  □ Delivery of services to the clients and campaigns within the site, with focus on maintaining uptime of all campaign service components and back office functions□ Provision, configuration and maintenance of desktop infrastructure within the site, encompassing hardware, desktop operating system and applications for all site users□ Physical computer room on site, including maintenance of the room environment and physical support of all server and communications systems installed□ Ensuring that time and quality SLA`s for IT Support Services are met for resolution of all incidents, problems and requests raised through the centralized Service Desk application□ Maintenance of the physical structured cabling on site, including patching within the computer room, ancillary racks and to the desktop□ Work as Line Manager to Support Analyst(s) providing direction, performance reviews, development planning and all other aspects of personnel management□ Contact Centre agent and back office user profile administration, including Active Directory group and account structure and email account administration and maintenance□ Business continuity management□ Change management□ Conduct out of hours support activities, as required to support infrastructure changes / initiatives and meet business needs.



Rybrook

• United Kingdom
• Automotive
• 1 - 100 Employee

• IT Site Support

  • 2004 - 2008

  Working for the group head office in a team of four, covering the group wide IT operations and infrastructure. I was primarily responsible for ten car dealerships holding the Volvo, Jaguar and Mercedes Benz franchises in the North West and North East of England. The motor trade is not a simple business but one that encompasses three very distinct areas of operation being the sale of goods (cars and parts), the sale of time (servicing) and accounting/administration. Across these various operational areas I was responsible for and supported more than 250 IT users to whom I generally provided advice, training and technical support. I developed a planned maintenance schedule as I prefer a proactive approach to the role rather simply reacting to equipment problems. I think that this provides a more cost effective solution for the Company, results in a better service to my users and assists the business to operate more effectively.Key Responsibilities:□ First and second line support including fault resolution both on site and remotely□ Network, PC (98/2000/XP/Vista) and Server (2000/2003) configuration, installation and administration including full Microsoft office suite and bespoke software.□ Peripheral equipment installation, including printers, scanners, fax and networking devices.□ Project management, Site relocations.□ User support thorough ad hoc and specific task training□ Liaising with third parties for installation and fault resolution.□ E-mail configuration, both third party pop3 and client software.□ Antivirus roll out to all sites□ Product research and purchasing including licensing□ Hardware and software auditing□ Kerridge support, installation fault logging on Rev 7 and Rev 8□ Telephone system maintenance (Splicecom)□ Active Directory



Berkeley Group Plc

• United Kingdom
• Housing and Community Development
• 700 & Above Employee

• IT Site Support

  • 1998 - 2004

  □ Project management and training of end users□ Software installations (bespoke and standard programs)□ Help desk duties included call logging, telephone support and call prioritising□ PC and Server maintenance and administration□ Disaster recovery implementation□ General Helpdesk duties including call logging and remote support□ First and Second line support□ PC Configuration and installation□ Server and E-mail administration (Microsoft Exchange server) □ Project management and training of end users□ Software installations (bespoke and standard programs)□ Help desk duties included call logging, telephone support and call prioritising□ PC and Server maintenance and administration□ Disaster recovery implementation□ General Helpdesk duties including call logging and remote support□ First and Second line support□ PC Configuration and installation□ Server and E-mail administration (Microsoft Exchange server)