Andrew Allman Email & Phone Number

Salisbury, Gb

Independant cyber security consultants ISO27001, SC900, SC200, CISSP, CLAS and SABSAAndrew is an independent Privacy and Information Security Professional with considerable experience in data protection, information security management and security architecture. Andrew is M. Inst. ISSP, CLAS, CISSP, ISO27001 and SABSA Certified.

Following the complete separation of LPCH from the Lloyds Group and withdrawal of the Microsoft Managed Device service the security tooling needed to be reviewed and reconfigured. Andrew carried out the review, configuration and optimisation of the Microsoft stack. This included; Configuring and Microsoft XDR Security suite of Defender for Endpoint, Defender for Identity, Defender for business setting policies and alerts. Intergration of Intune into Defender and creating rules. Intergration of Defender for Cloud into Defender console. Implementation of Sentinel and connecting Microsoft XDR and onboarding non-Microsoft device logs. Achieve Cyber Essentials Plus Starting ISO27001:2022 project.

Coventry, England, Gb

Following the divestment from McKesson Group Andrew was brought into help develop the new GRC function this included: Developing the Risk and Assurance Framework Implementing Policy and Standards Rolling out security training Establishing a Third-Party Risk Management capability.

Coventry, England, Gb

Further divestment activity saw the separation of the pharmacies into a standalone independent retail business to support the NHS Hospitals and HMG Prisons. Andrew acted as BISO and Security Architect for the new business, which was solely cloud based using Microsoft products, Azure, Microsoft XDR suite, Business Central together with SaaS POS solution and dispensing solutions. This included: Implement Azure Entra ID security requirements Configuring Microsoft XDR Security suite of Defender for Endpoint, Defender for Identity, Defender for business and Defender for Cloud. Monitoring Defender console the alerts. Advising on the LAN and VLAN architecture using Meraki. Producing tailored security policies Achieve Cyber Essentials Plus

Ellesmere Port, Gb

Sep 2022 – Feb 2023 Interim Security Manager Survitec Group (Contract) Andrew stood in as interim in the gap between the previous manager leaving and the new manager on-boarding. Key tasks include: • Day today security management • Managed Microsoft Defender for Endpoint alerts and investigations • Conducted vulnerability scanning using Microsoft Tenable • Initiate the Sentinel Project and created the initial workspace and sensor deployment • Providing risk management and third-party assessment support. • Achieve Cyber Essentials Plus and managed ISO27001 implementation project.

New York, Ny, Us

Andrew was Security Lead for Cybersecurity Risk and Solutions for UK and EMEA with responsibility for all aspects of security and privacy. Key tasks and achievements are: • Advising on all aspects of risks and information security. • Carrying out technical risk assessments on projects (including cloud and digital appications) and third-party suppliers and identifying required security controls to be implemented which were based on the NIST-800 Framework. • Producing security policies and standards. • Managed and monitored alerts for the Sentinel One SOAR tool. • Conducted vulnerability scans using Qualys • Worked with Zscaler to design a zero-trust solution for the Middle East stores. • Managing assurance activities including third party supplier audits, penetration tests and SOX compliance audits. • Maintaining PCI compliance for UK and EMEA which involved producing card flow diagrams, policies and supporting annual PCI audit and AOC submission.

New York, Ny, Us

Employed within KPMG Information Protection and Privacy Practice specialising in governance, architecture and privacy. Responsible for the delivery of security projects into Corporate, Financial Services and Public Sector clients. Andrew also has considerable experience of Government Security working with HMRC, DWP and Local Authorities.

Roma, Roma, It

Managed Business Team focusing on UK, Europe and US role included both sales and delivery.

Broomfield, Colorado, Us

Account Manager focusing on selling communication services in to government

Bsc, Chemistry

Master'S Degree, Design Of Information Systems

Sciences