Experience

Kaplan International
• Colombia
• Primary and Secondary Education
• 1 - 100 Employee
• Head of Information Security and IT Risk

  • Jun 2023 - Present


SHL

• United Kingdom
• Software Development
• 700 & Above Employee

• Head of IT and Security

  • Feb 2018 - Jun 2023

  Responsibility for IT and Information Security and Governance function at SHL - Management of Global IT and Security teams. - Designing and implementing IT Security Strategy - Implementation of Cyber Security Strategy to protect SaaS solutions including AWS - GDPR and Data Privacy Laws - updating Article 30 Register of Records, completing DPIA and reviewing policies and procedures. Implementing Privacy Information Management System - Maintaining and continually improving ISO… Show more Responsibility for IT and Information Security and Governance function at SHL - Management of Global IT and Security teams. - Designing and implementing IT Security Strategy - Implementation of Cyber Security Strategy to protect SaaS solutions including AWS - GDPR and Data Privacy Laws - updating Article 30 Register of Records, completing DPIA and reviewing policies and procedures. Implementing Privacy Information Management System - Maintaining and continually improving ISO 27001, PCI DSS, Cyber Essentials plus, CSA STAR certifications - Threat intelligence and forensics investigation - Implemented Information Security Staff Awareness programme - Managed complex IT budgets, helping to ensure efficient use of resources. - Implementing and maintaining CyberRisk - Member of Cloud Governance Steering Group - providing technical security architecture review and approval. - Vulnerability management - Penetration testing of applications. - Securing SHL Cloud solutions including Office 365, Salesforce, Workday using SSO / MFA and CASB - Key member of the Compliance Board - Maintaining and continually improving ISO 22301 certification, DR Testing planning, BCP strategy Show less



Gartner

• United States
• Information Services
• 700 & Above Employee

• IT Service Management and Information Security Director

  • Jan 2017 - Feb 2018

  Involvement in ISO 20000 and ISO 27001 certified ITIL and Security processes / procedures Key Deliverables • Managed the integration of Gartner and CEB support processes • Implemented ITIL based policies, processes and procedures certified to ISO 20000-1 standard for a $2 billion company. • Continually improving existing ISO 20000 compliant processes and procedure • Designed the internal audit process and schedule to ensure governance of IT policies. • Developed and… Show more Involvement in ISO 20000 and ISO 27001 certified ITIL and Security processes / procedures Key Deliverables • Managed the integration of Gartner and CEB support processes • Implemented ITIL based policies, processes and procedures certified to ISO 20000-1 standard for a $2 billion company. • Continually improving existing ISO 20000 compliant processes and procedure • Designed the internal audit process and schedule to ensure governance of IT policies. • Developed and the maintained SOX controls. Show less



CEB

• France
• Design Services
• 1 - 100 Employee

• IT Service Management and Infrastructure Optimisation Director

  • Oct 2014 - Jan 2017

  Responsibility for ISO 27001, ISO 22301 and ISO 20000 certifications and information security. Key Deliverables • Management of policies and procedures. • Providing valuable input and insight into portfolio project planning so that infrastructure considerations are effectively managed throughout the project life-cycle. • Ensuring all systems and services are monitored to the agreed level and enhancing monitoring to meet business and application needs. • Implemented… Show more Responsibility for ISO 27001, ISO 22301 and ISO 20000 certifications and information security. Key Deliverables • Management of policies and procedures. • Providing valuable input and insight into portfolio project planning so that infrastructure considerations are effectively managed throughout the project life-cycle. • Ensuring all systems and services are monitored to the agreed level and enhancing monitoring to meet business and application needs. • Implemented ITIL based policies, processes and procedures certified to ISO 20000-1 standard for a $1 billion company. • Continually improving existing ISO compliant processes and procedure • Designed the internal audit process and schedule to ensure governance of IT policies. • Managed complex IT budgets, helping to ensure efficient use of resources and cost reduction when appropriate. • Developed and the maintained SOX controls. • Architected and implemented enterprise wide Information Security solutions

• Head of Service Management

  • Oct 2011 - Sep 2014

  Promoted to the role of Head of Service Management with the initial remit to create and train new Service Desk, Server Teams and Service Management function. Then transition in house the Service Delivery function including the migration of key internal and external systems from the outsource provider’s data centre into new data centres. Designed and implemented mature ITIL processes and procedures and Service Management toolsets throughout the enterprise to conform to ISO 20000-1 standard and… Show more Promoted to the role of Head of Service Management with the initial remit to create and train new Service Desk, Server Teams and Service Management function. Then transition in house the Service Delivery function including the migration of key internal and external systems from the outsource provider’s data centre into new data centres. Designed and implemented mature ITIL processes and procedures and Service Management toolsets throughout the enterprise to conform to ISO 20000-1 standard and meet SOX controls, aligning IT process and function with the goals of the business. Key Deliverables • Created new teams and migrated services from outsource provide to new data centres in London and America. • Implemented ITIL based policies, processes and procedures conforming to ISO 20000-1 standard for a $1 billion company. • Reduced the number of repeat incidents through solutions designed through the Problem Management process and root cause investigation. • Designed the internal audit process and schedule to ensure governance of IT policies. • Designed and implemented of SSO technologies for internal and external applications. • Implemented Business Relationship process to understand and meet customer needs and the business priorities and help to form IT plans and roadmaps. • Developed and the maintained SOX controls related to ITIL disciplines. • Managed complex IT budgets, helping to ensure efficient use of resources and cost reduction when appropriate. • Agreed and implemented Service Level Agreements and real time and historical reporting against SLA. • Implemented Configuration and Asset Manager tool. • Architected and implemented enterprise wide Service Management toolset for ITIL processes. • Managed ISO 20000-1 certification project.



SHL Group

• Infrastructure Services Manager

  • Dec 2007 - Sep 2011

  Responsibility for the management of the outsourced contract of the Service Delivery function, including the management of complex transition and transformation projects. Following a merger with a US based company at the start of 2011 my role was expanded to include the management of the production support team of their infrastructure with data centres in USA, UK and Australia. Key Deliverables • Successful movement of the Service Delivery functions (Service Desk and Server… Show more Responsibility for the management of the outsourced contract of the Service Delivery function, including the management of complex transition and transformation projects. Following a merger with a US based company at the start of 2011 my role was expanded to include the management of the production support team of their infrastructure with data centres in USA, UK and Australia. Key Deliverables • Successful movement of the Service Delivery functions (Service Desk and Server Management) to our outsource partner • The migration of SHL’s key customer facing ($100+million) online business to a virtualised environment within in a new Data Centre. • Implementation of Disaster Recovery plan for mission critical systems and services. • The project management of a number of high profile Continuous Service Improvement plans to both improve the services to our customers and to reduce the overall cost of the service. • The integration of new support team based in America into ITIL compliant support processes and completion of knowledge transfer. • The integration of the merged company’s systems into a single amalgamated environment. Show less



SHL Group plc

• Operations Manager (Global)

  • Mar 2005 - Dec 2007

  Senior manager position responsible for a global team of 13 supporting over 600 servers and networking devices at two enterprise level Data Centres and 39 office locations in 19 countries. Operational support of two Data Centre environments (US and UK) hosting web based revenue generating systems (24/7/365). Line management of teams based in UK, Netherlands, US and Australia. Member of the Global IT Management team with response for the development of SHL’s technology strategy and… Show more Senior manager position responsible for a global team of 13 supporting over 600 servers and networking devices at two enterprise level Data Centres and 39 office locations in 19 countries. Operational support of two Data Centre environments (US and UK) hosting web based revenue generating systems (24/7/365). Line management of teams based in UK, Netherlands, US and Australia. Member of the Global IT Management team with response for the development of SHL’s technology strategy and direction. Key Deliverables • Designed and implemented a Global Private IP based network to 39 sites. • Architected and implemented Windows 2003 clusters running SQL 2005 and the migration of key revenue generation systems from SQL 2000 to SQL 2005 • Drove introduction of new technology – including Blade servers, Mercury Performance Testing, SAN Virtualisation, Intrusion Detection, • Implementation of ITIL compliant processes and procedures for Change / Incident / Problem management • Simultaneous refit of an existing, and introduction of a new, Data Centre environment. • Change of support structure following successful business case justification to the board to enable a shift rota team to be implemented. • Involvement with roll out through to the ongoing support of a new Global accounting system (SUN Systems 5) infrastructure.

• Network and Server Services Team Manager

  • Mar 2004 - Mar 2005

  I was promoted to the role of Infrastructure Services Manager with the responsibility of the management of the outsourced contract, including the management of complex transition and transformation projects. Following a merger with a US based company at the start of 2011 my role was expanded to include the management of the production support team of their infrastructure with data centres in USA, UK and Australia. Key Deliverables • Successful movement of the Service Delivery… Show more I was promoted to the role of Infrastructure Services Manager with the responsibility of the management of the outsourced contract, including the management of complex transition and transformation projects. Following a merger with a US based company at the start of 2011 my role was expanded to include the management of the production support team of their infrastructure with data centres in USA, UK and Australia. Key Deliverables • Successful movement of the Service Delivery functions (Service Desk and Server Management) to our outsource partner • The migration of SHL’s key customer facing ($100+million) online business to a virtualised environment within in a new Data Centre. • Planned, implemented and tested Disaster Recovery plan for mission critical systems and services. • The project management of a number of high profile Continuous Service Improvement plans to both improve the services to our customers and to reduce the overall cost of the service. • The integration of new support team based in America into ITIL compliant support processes and completion of knowledge transfer. • The integration of the merged company’s systems into a single amalgamated environment.

• Systems Engineer

  • Jan 2000 - Mar 2004

  Responsible for 24x7 operational management of 300+ Windows (including W2k and NT4) and network connectivity (Cisco) across two Data Centres. Primarily using Microsoft technologies (Exchange, SQL, IIS, and MSCS) for both corporate services and revenue generating web systems. Key Deliverables • Completion of key project to roll a new hardware load balanced MS CMS based corporate internet site (www.shl.com) • Support of fully redundant hardware load balanced external web sites… Show more Responsible for 24x7 operational management of 300+ Windows (including W2k and NT4) and network connectivity (Cisco) across two Data Centres. Primarily using Microsoft technologies (Exchange, SQL, IIS, and MSCS) for both corporate services and revenue generating web systems. Key Deliverables • Completion of key project to roll a new hardware load balanced MS CMS based corporate internet site (www.shl.com) • Support of fully redundant hardware load balanced external web sites (web tier / application tier / database tier) • Support of a multi-domain NT 4.0 network and a multi-site Exchange 5.5 organisation. • Global rollout and support of McAfee Groupshield to combat the threat of email based viruses. • Roll out of new ITIL compliant Service Desk / Call logging system • Project Managed the implementation of ITIL Compliant Change management process. • Implementation of Business Objects reporting system. • Key member of the team involved with the change of hardware provider from Dell Poweredge to IBM xseries servers.

• Graduate Systems Engineer

  • Jun 1998 - Dec 1999

  Responsible for the support and maintenance of servers and networking for all SHL sites globally. Apart from the support of servers / services at the Head Office location, my primarily role was the support of the European region including a number of high profile office moves and server replacements. Key deliverables: • Successfully project managed and implemented an office move of the Head Office / UK business to new purpose built office (300 staff). • Project managed successful… Show more Responsible for the support and maintenance of servers and networking for all SHL sites globally. Apart from the support of servers / services at the Head Office location, my primarily role was the support of the European region including a number of high profile office moves and server replacements. Key deliverables: • Successfully project managed and implemented an office move of the Head Office / UK business to new purpose built office (300 staff). • Project managed successful completion of a number of office moves within the European region. • Lead technical resource on projects to replace out of warranty servers. • Support of a multi-domain NT 4.0 network and a multi-site Exchange 5.5 organisation. • Support of 39 site Microsoft VPN network, including the addition of new sites. • Implemented the first company wide corporate intranet. • Meridian Option 11 and 61 telephony support