Alan Crouch Email & Phone Number

Reading, England, Gb

London, Gb

I led the comprehensive management of the organisation's IT systems, overseeingservice management, new system development, and enhancing the Head ofInformation Security role. I managed cybersecurity, physical security, and data protection, establishing a robust framework for Information Risk Management, Business Continuity, Disaster Recovery, and Incident Management.I implemented responsive incident response strategies, lead records management, and serve as Project Director for all IT projects. Was the service lead for the Service Integration and Management (SIAM) model, I optimise service delivery through effective coordination with diverse systems and suppliers.Few on my notable contributions were as follows:• Headed complex project to replace a system holding classified data, navigating challenges posed by COVID, and ensuring timely and cost-effective delivery.• Led the implementation of a Service Integration and Management (SIAM) model concurrently with the above project, ensuring effective supplier management system was in place for the system going live.• Presented business case to Senior Management, resulting in the implementation of measures that significantly reduced a major corporate risk to a manageable level.• Conducted regular testing of disaster recovery processes through tabletop exercises, resulting in improved resilience and resource allocation for effective responses to various scenarios.• Directed the regular review of supplier compliance with security standards, including ISO 27001, and oversaw the formal accreditation of systems, involving commissioning penetration testing, conducting threat assessments, and security reviews.• Developed robust information security policy, clarifying staff responsibilities and expectations for data handling and management.• Led the implementation of Security Information and Event Management (SIEM) system, enhancing security and event monitoring for the system holding classified data.

London, Greater London, Gb

I led the transition for the new Data Protection Act (DPA) and General Data Protection Regulation (GDPR), ensuring comprehensive compliance in corporate and operational policies. Managed security, including governance, risk, and incidents, reporting directly to the Board. Covered the Head of Finance role for 18 months, concurrently overseeing Finance, Audit, Risk, and Governanceresponsibilities.During this tenure, I accomplished the following milestones:• Led the digital transformation of the JAC through the successfulimplementation of a new business application.• Ensured security accreditation was a central focus, employing a "security by default and design" approach abd embedding an Information Assurance (IA) professional within the development team.• Developed a bespoke Information Assurance accreditation regime, integrating IA into system development in live service and providing assurance at Board level.• Implemented a tailored Information Assurance management process for the business application, replacing the previous Risk Management and Accreditation Document Set (RMADS) arrangement.• Adopted a risk-based approach aligned with the HMG Security Framework, ISO 27001, and Cyber Essentials Plus.• Formulated systems support model incorporating "DevSecOps" specific to the JAC and integrating aspects of ITIL, ISO 27001, and a collaborative approach to support the technical architecture comprehensively.• Collaborated with the National Cyber Security Centre (NCSC) on the "Secure by Default" project, focusing on alternative and secure means of accessing the JAC business application• Directed GDPR compliance efforts for the JAC, identifying key gaps and developing an action plan to achieve compliance.• Led the full implementation of technical and process-based compliance changes since GDPR implementation.

London, Greater London, Gb

I guided a digital project from inception through design and build phases, achieving delivery into live service within an impressive one-year timeframe. I diligently managed the live service transition, addressing emerging business needs and prioritising improvements in collaboration with senior stakeholders and commercial partners. In February 2017, I led recovery efforts from system issues caused by a supplier, commissioning anindependent review, taking decisive action, and implementing a robust DevOps model. Furthermore, I implemented an open-source, cloud-hosted solution in alignment with Government Digital Service (GDS) design principles.My notable professional highlights are as follows:• Spearheaded the digital transformation of the JAC through the successful implementation of the business application, a critical element in modernising the organisation.• Achieved demanding budget savings while enhancing core business operations and improving candidate experiences through online applications and testing.• Led all facets of delivering JARS, replacing legacy IT systems, including securing funding, determining the procurement route, conducting market analysis, and obtaining Cabinet Office spend approval.• Positioned the application as one of the few true end-to-end digital systems across the government, creating opportunities for the JAC to charge for services and software.• Empowered efforts to improve the quality and depth of data for diversity statistics, enabling more insightful analysis, particularly in areas such as BME progression.• Received an Outstanding rating in three out of four annual appraisal meetings, underscoring the significant achievements in delivering digital transformation to the JAC.

London, Gb

Master Of Business Administration (Mba), Leadership Programmes

Post Graduate Diploma In Management Studies

Diploma In Credit Management