Alexander Bates Email & Phone Number

Chicago, Illinois, United States

Stockholm, Stockholm County, SE

Joined through Inteliquent Acquisition

Chicago, IL, US

• Developed and implemented a NIST SP 800-53 cybersecurity framework, consisting of a security policy, control standard, and guidelines with annual submission and oversight to the Department of Justice.
• Created and implemented a risk management framework to form the foundation of the security governance process and a Privacy by Design policy to meet global privacy regulation requirements
• Championed the creation of a Privacy program within the organization in coordination with the Legal department, building up the GDPR program from the ground up, with policy and procedures to support requirements.
• Established a governance committee for security and operations decisions and projects to deduce executive consensus of risks and remediation activities;
• Executed the identity and access management (IAM) program, establishing the guidance for key processes for a successful implementation and maintenance of the IAM program.
• Managed the VP Information Security and department team portfolio of projects and budget

London, GB

• Directed a high-performing cybersecurity team in reviewing information security deliverables, ensuring adherence to best practices, industry standards, and regulatory requirements.
• Led ISO 27001 implementations and audits for clients, providing strategic guidance and technical expertise to achieve certification and enhance their information security management systems.
• Played a key role in providing privacy consulting deliverables to clients, advising on GDPR compliance, data protection impact assessments, and privacy by design principles to safeguard sensitive information and.
• Served as a strategic, trusted, and reputable point of contact for client leadership, fostering strong client relationships and ensuring timely and effective communication to address client needs and inquiries..
• Developed and implemented strategic cybersecurity initiatives, improving clients' risk management frameworks and supporting their business objectives.
• Fostered a high-performance culture, resulting in improved team dynamics, innovation, and client satisfaction.

London, GB

• Responsible for a portfolio of cyber security engagements for clients, specializing in outsourced department consulting, conducting maturity assessments, gap analysis, and remediation activities to enhance their cyber.
• Managed over 30 separate SOC 2 Type II reports across diverse industries, ensuring adherence to AICPA standards and regulatory requirements, and generating over $2 million in revenue for the firm.
• Acted as a subject matter expert for client financial reporting, providing expertise in Sarbanes Oxley IT system control validation to ensure accurate and compliant financial disclosures.
• Oversaw outsourced IT internal audit engagements, conducting comprehensive assessments of clients’ IT systems and controls to identify areas of improvement and mitigate operational risks effectively.
• Provided detailed guidance and support during the implementation of suggested tooling and procedures, ensuring seamless integration with clients’ existing infrastructure, network and associated processes while.

Toronto, ON, CA

• Led the integration of newly emerging technologies such as “internet of things” and blockchain-based financial system considerations into client’s cybersecurity frameworks, bolstering their defense against.
• Advised clients on the strategic adoption of emerging technologies to enhance their information security posture, including the deployment of quantum-resistant encryption algorithms and decentralized identity.
• Conducted comprehensive technical assessments and penetration testing using innovative tools and methodologies such as a focus on vulnerability management and upgrading procedures uncover hidden vulnerabilities and.
• Delivered technical presentations to client leadership, showcasing the potential of emerging technologies to revolutionize cybersecurity practices and drive digital transformation initiatives while mitigating.
• Collaborated closely with internal teams to develop proof-of-concept prototypes and pilot projects leveraging emerging technologies, demonstrating their feasibility and effectiveness in real-world environments.
• Contributing author and researcher on firm whitepaper titled: "Missing Link - Navigating the Disruption Risks of Blockchain"

Toronto, ON, CA

• Responsible for the implementation of Information Security frameworks such as COBIT, ITIL, NIST CSF/800-53, and ISO 27001, ensuring seamless integration with clients’ existing processes and systems.
• Advised clients on the technical aspects of information security, including the selection and deployment of security controls, department roles and responsibilities, and security maturity benchmarking, to enhance their.
• Conducted in-depth technical assessments and penetration testing to identify vulnerabilities in clients’ networks, applications, and infrastructure, providing actionable recommendations for remediation.
• Led technical presentations to client leadership, translating complex security concepts and risk analysis findings into clear, actionable insights to support informed decision-making and prioritize resource allocation.

New York, NY, US

Experience:IT Audit, Sarbanes-Oxley, COSO, COBITIndustry:Insurance

Experience:CMBS Loans Renewal, Property Risk Profiling, Mortgage Banking, Financial AnalysisIndustry:Insurance, CMBS, Finance, Banking, Commercial Real Estate

Oak Brook, IL, US

Experience: Internal Audit Operations, Sarbanes Oxley 404, IT Audit, Management ReportingIndustry focus: Private Equity, Mergers & Acquisitions, Manufacturing, Packaging

Oak Brook, IL, US

San Francisco, California, US