Brad Morrow Email & Phone Number

Auckland, New Zealand

Auckland

In my role as a Group Manager at HCL Technology, I led a comprehensive programme for our enterprise customer, Fonterra, aimed at enhancing their information security posture. My primary responsibility was to interpret the information management policy and gather business requirements to design, build, test, and implement a suite of security controls for Information Security (data retention and disposal, sensitivity labelling, data loss prevention, and insider risk management).Key… Show more In my role as a Group Manager at HCL Technology, I led a comprehensive programme for our enterprise customer, Fonterra, aimed at enhancing their information security posture. My primary responsibility was to interpret the information management policy and gather business requirements to design, build, test, and implement a suite of security controls for Information Security (data retention and disposal, sensitivity labelling, data loss prevention, and insider risk management).Key Achievements and Responsibilities:Programme Leadership: Spearheaded the development and implementation of security controls for Fonterra that aligned with their information management policy, ensuring robust protection for data across its lifecycle.Requirement Gathering: Collaborated with various business units at Fonterra to collect detailed business requirements, ensuring the designed solutions met the needs of a diverse range of stakeholders.Design and Implementation: Oversaw the design, testing, and deployment of security controls, ensuring they were seamlessly integrated into Fonterra's existing systems and processes.Global Rollout: Managed the change management process for rolling out these security enhancements across Fonterra's global operations, impacting approximately 20,000 employees.Stakeholder Engagement: Engaged with key stakeholders at Fonterra to ensure alignment and buy-in, facilitating smooth transitions and adoption of new security measures.Change Management: Developed and executed change management strategies to support the global rollout, including training, communication, and support plans to ensure successful adoption. Through this role, I demonstrated my ability to manage complex programmes, drive organisational change, and enhance information security on a global scale, specifically for a major enterprise customer like Fonterra. Show less

Auckland, New Zealand

As the Cyber Security Program Manager at Tower Insurance, I was pivotal in executing a comprehensive cyber security strategy. My responsibilities included strategic planning, leadership, collaboration, and project management, ensuring the organisation’s robust security posture against emerging threats.Strategic PlanningSecurity Strategy and Roadmap: Contributed to the creation of security strategy and roadmap.Programme and Business Case Development: Managed a two-year security… Show more As the Cyber Security Program Manager at Tower Insurance, I was pivotal in executing a comprehensive cyber security strategy. My responsibilities included strategic planning, leadership, collaboration, and project management, ensuring the organisation’s robust security posture against emerging threats.Strategic PlanningSecurity Strategy and Roadmap: Contributed to the creation of security strategy and roadmap.Programme and Business Case Development: Managed a two-year security programme, prioritising critical risk projects with well-structured business cases.Risk Assessment and Management: Conducted thorough risk assessments and implemented mitigation strategies.Compliance Management: Achieved PCI DSS complianceLeadership and CollaborationTeam Leadership: Developed and led a diverse team of security professionals, fostering continuous improvement.Cross-Department Collaboration: Integrated security practices across various business processes and projects.Executive Reporting: Provided regular updates to executive leadershipProject and Operational ManagementProject Management: Oversaw 17 key projects, including SIEM and SOC services, information management solutions (sensitivity labeling, DLP, data lifecycle management), secure coding practices, third-party risk management, PIM, PAM, and PAW.Incident Response: Conducted ransomware simulation testing to enhance preparedness.Vendor and Third-Party Management: Coordinated with vendors and third-party providers for effective security service delivery.Security Governance: Offered governance and advisory services to projects, agile teams, and operations, ensuring compliance with security policies.Security Audits: Conducted regular audits and reviews to assess and improve security controls.Through my role at Tower, I demonstrated my ability to lead comprehensive security programmes, manage complex projects, and foster collaboration, significantly enhancing its security posture. Show less

Auckland, New Zealand

PCI DSS project. Scoped the NZAA cardholder data environment and payment channels. Establishment of a PCI eco system throughout the business. Assessed against a SAQ D (most complex self assessment), but with the assistance of a QSA, negotiated security controls down from 350 to 87. Creation of remediation roadmap, including closure of some high priority gaps, reporting to acquiring bank.

Auckland, New Zealand

As a Senior Project Manager, I sat across multiple customer professional services engagements, delivering a wide array of Cloud, Security, Connectivity, and Modern Workplace projects. ✔️ Cloud Discovery & Strategy Development✔️ Cloud Landing Zone Builds, Migrations & App Modernisations✔️ Data Platforms & Analytics✔️ Private, Hybrid, Public (AWS and Azure) Services✔️ Cloud Web & WAF Security✔️ Secure Remote Access✔️ Zscaler ✔️ Network-as-a- Service✔️… Show more As a Senior Project Manager, I sat across multiple customer professional services engagements, delivering a wide array of Cloud, Security, Connectivity, and Modern Workplace projects. ✔️ Cloud Discovery & Strategy Development✔️ Cloud Landing Zone Builds, Migrations & App Modernisations✔️ Data Platforms & Analytics✔️ Private, Hybrid, Public (AWS and Azure) Services✔️ Cloud Web & WAF Security✔️ Secure Remote Access✔️ Zscaler ✔️ Network-as-a- Service✔️ Software-Defind WAN✔️ M365 Discovery, Migrations & Management Show less

Auckland, New Zealand

Originally contracted to establish an agency model claims department for the EQC during the Kaikoura earthquake. Remained on contract for many other projects, including Tower's largest transformation programme Simplification. This included the design and implementation of Azure cloud services from which a new policy, claims, customer communications and digital platform was built on.

Auckland, New Zealand

Providing Project Management services to enable and drive the migration of over 250 applications and infrastructure platforms out of an on-premise Datacenter in to a Hybrid-Cloud solution consisting of Amazon Web Services (AWS) and a NZ based cloud provider.

Auckland, New Zealand

Managed the Infrastructure team consisting of onsite, Trans-Tasman and off-shore partners to manage Wintel, midrange and AS/400 servers, Open Source Web application servers and Citrix desktop and application hosting. Achieved 95% virtual to physical ratio and storage for 2000 user environment across 3 lines of business for the Suncorp group.

Auckland, New Zealand

Shannon, Ireland

Cork, Ireland

London, United Kingdom

London, United Kingdom

Auckland, New Zealand

Diploma In Business Computing

Education record