Andrew C. Email & Phone Number

County Cork, Ireland

Application Security and Penetration testing Governance Management: Leading initiatives to standardise security testing and vulnerability identification practices. Driving change projects aimed at streamlining operational efficiency. Managing the enhancement of vulnerability remediation efforts. Hosting educational workshops for stakeholders. Defining key performance metrics to guide strategic improvements and risk reduction. Driving projects to implement shift-left strategies, including the adoption of Secure Software Development Lifecycle (SSDLC) practices.Leadership and Strategy:Leading the development and implementation of information security governance frameworks, policies and procedures to align with industry standards and regulatory requirements, while also driving the identification and application of the most relevant management information (MI) and metrics. Utilising tools like Power BI to quantify cybersecurity risks and performance, focusing on the most critical indicators of security posture and risk. These insights are delivered to senior management to support informed decision-making and strategic improvements.Third-Party Provider Management for Information Security Services: Serving as the service manager, overseeing third-party providers delivering comprehensive information security solutions, including vulnerability and patch management, secure configuration, DDoS protection, and infrastructure security. Cybersecurity Controls Oversight:Oversee the scoring and systematic checking of cybersecurity controls, ensuring comprehensive evaluations are conducted to assess their effectiveness. Implement strategies for continuous improvement and adherence to best practices.Regulatory Compliance and Audit Management:Manage the alignment of cybersecurity controls with key regulations, including DORA, NIS2, etc., through comprehensive security questionnaires, audits and stakeholder engagement.

• Partnered with IT and business units to conduct security assessments, address findings and validate adherence to security guidance.• Evangelised security within Qualcomm and drove company-wide environment hardening initiatives.• Provided security recommendations on existing and new application, system and network architectures.• Established alternative security measures to allow for business continuity while protecting the company's assets.• Developed and advised on best practices around cloud platforms.• Tracked data security findings to closure in a timely manner by partnering withbusiness units, communicating solutions and verifying remediation efforts.• Performed risk analysis for corporate functional & technical areas and 3rd partyproviders relevant to data security.• Acted as a mentor and provided guidance and technical leadership to other staffmembers.

• Conducted application security reviews.• Web application penetration testing.• Mobile application penetration testing including MDM and MAM solutions.• Technical lead for several projects providing IT security design, direction and recommendation to the business. • Wrote, reviewed, and edited technical documentation. Presented complicated technical information to technical and non-technical stakeholders. • Wrote automation and other code to deliver tactical solutions.• Identified security risks and vulnerabilities and worked with stakeholders to determine appropriate fixes or mitigating controls.• Active role in red team and purple team engagements.• Customised exploits for tailored attack simulations.• Lead secure developer training and employee awareness training

Dublin, County Dublin, Ireland

Delivered lectures for masters level 9 module. Cybersecurity Fundamentals including Red and Blue Team Labs. The degree is accredited by University of Sunderland.

- Worked with a team of Technical Specialists to deliver key Security services.- Liaised and engaged with key internal stakeholders to ensure alignment across business owners and Group Technology.- Worked with Third Parties and ensured that they are being held to account as regards service delivery and contractual agreements.- Supported the teams project portfolio and fulfilled the role of technical lead on multiple engagements.- Ensured that change was delivered in compliance with the relevant production standards and did not negatively impact service.- Ensured adherence to best practice infrastructure deployment, change release procedures and standards.

Msc Forensic Computing And Cybercrime Investigation

Mba Strategy, First Class Honours

Bsc, Electronics Engineering

Higher Certificate, Leadership & Management