IT Security Manager, Information Security Manager, Senior Information Security Analyst

Design and oversee the implementation of cloud security architecture to ensure the confidentiality, integrity, and availability of systems and data. Facilitate and provide oversight for penetration testing, vulnerability management, audits, and security assessments. Leverage expertise in data protection, business continuity planning, identity and access control, intrusion detection/prevention, virus protection, DLP, firewalling, and container security. Manage certification processes, encryption, and public/private key infrastructure. Develop and implement effective incident response policies and procedures.

• Created and implemented pragmatic, vendor-neutral IT strategies successfully which maximized value and minimized risk, resulting in improved operational efficiency and cost savings.
• Led full solution lifecycle delivery, from pre-sales to post-sales and operations, ensuring seamless implementation and customer satisfaction.
• Ensured compliance with governance, risk, and compliance frameworks such as ISO 9001/27001/27701, ITIL, PCI DSS, and NIST CSF, establishing a strong foundation for secure and compliant operations.
• Leveraged expertise in cyber security to proactively identify and mitigate risks, ensuring the confidentiality, integrity, and availability of systems and data.
• Implemented an information security management program, integrating security policies and procedures into the SDLC to mitigate vulnerabilities and enhance overall security.
• Developed a risk-based enterprise security architecture framework, aligning with industry standards (TOGAF, ISO 2700x) to assess and strategize security plans for web services, cloud computing (MS Azure, O365, AWS), and mobile devices.

Managed the security architecture and implementation of complex systems in alignment with business
and legal compliance requirements, ensuring the confidentiality, integrity, and availability of
information assets. Proposed, designed, and oversaw the implementation of security measures for the
Microsoft Azure platform to enhance the overall security posture of the organization. Collaborated
with local teams, SOC, and service providers to strengthen security practices and incident response
capabilities.
* Conducted vulnerability management, penetration testing, audits, and compliance assessments to
identify and mitigate security risks successfully.
* Contributed to strategic decision-making and integrated security considerations into
organizational initiatives as a member of the organization's change control.
* Led the design and implementation of a secure platform for patients and visitors in charity
hospices, ensuring data confidentiality, privacy, and compliance with GDPR regulations.
* Implemented centralized automated solution for security, data protection, and risk assessment
in change management. Boosted efficiency, minimized vulnerabilities, and enhanced security
posture.

Led the design, deployment, and assurance of security architecture by specializing in Cloud
platforms security solutions. Managed a team of security consultants and operations personnel,
providing guidance and support throughout the pre- and post-sales process. Oversaw information
security incidents by effectively conducting investigations and implementing appropriate remediation
measures.
* Enhanced the organization's security capabilities by establishing a strategic partnership with
a Managed Security Service Provider (MSSP).
* Managed a team of security consultants and operations personnel, providing guidance and
support throughout the pre- and post-sales process.
* Managed and guided teams to remediate risk, threats, and vulnerabilities, improving overall
security posture.
* Led regulatory and audit reviews, implementing audit plans to assess security risks.
* Created enterprise security event monitoring centre, setting the vision and training staff to
enhance security monitoring capabilities.