Brett Cornforth Email & Phone Number

As a Senior Security Architect - Digital, I champion early security engagement in new solutions and address security control gaps in existing solutions. I work closely with Digital teams to maximize security outcomes, provide expertise in cybersecurity, and lead the deployment of security services across all functional areas to reduce cyber security risks.

Sydney, New South Wales, Au

As a Senior Cyber Security Professional serving a fintech in the business banking and payments space, I primarily lead and collaborate with business, project and development teams to identify, assess and incorporate security best practice when introducing technology change. Security engagements often incorporate: Architectural Reviews, Third Party risk assessments and end to end security assessment of new solutions, from project inception to delivery. Areas which I focus on include: Security reviews ensuring designs incorporate: Australian Prudential Regulation Authority (APRA) regulated CPS234 Compliance, Payments Card Industry (PCI), System and Organisation Control Review (SOC), International Organisation of Standardisation (ISO 27001), Australian Privacy Principles (APP) and Australian Payment Network (APN) requirements and contract reviews to ensure that appropriate cyber security terms are present in all agreements. Two of my latest achievements include evaluating and assisting in securing a new payment solution (SPOC Based Payment Solution) and launch of Tyro Apple pay. (Refer to links provided.)

Johannesburg, Johannesburg, Za

Held the position of cluster Security Lead for Barclays Africa/Absa WIMI division which included: Wealth, Investment, Corporate Portfolio Management and Insurance in South Africa and Africa divisions whilst having the opportunity to influence security decisions within the cluster and provide C-level advise in respective forums, shaping change within the technical and business teams, whilst securing solutions in the build to run space.Successfully lead and secured a large number of migration projects across its WIMI (Wealth, Investment, Insurance, Portfolio Management division) during the Barclays PLC to ABSA group separation, securing end to end systems and solutions that were migrated from the UK to South Africa. Lead a number of security initiatives across Barclays Africa’s Banking WIMI Operations, defining a security narrative that was adopted in its Africa group divisions, spanning across 11 offices in countries such as Mauritius, Mozambique Botswana, and Namibia.

Contracted initially as Senior Cyber Security Consultant and promoted to Technical Information and Security Manager for the Integrated Justice System, I formed part of a highly effective team tasked by parliament to modernize the Criminal Justice Systems across the countries justice cluster. I was primarily responsible for architecting, deploying and maintaining the IJS's Security Programme whilst contributing to various aspects of Operations Management.My responsibilities included designing, deploying, and managing security environments relating to: PKI Environment, SSL/TLS Connectivity, Endpoint Protection, IPS, Firewall, Network Security, Server Security, Desktop Security, VPN's, Site-to-Site VPN Security, Remote access security, AAA Environment, High Availability, Vulnerability and Patch Management, AD User and Client Security, Security Auditing, Domain Security, Virtualization Security, Data Storage Security, Disaster Recovery, Testing and Reporting, Business Continuity.In this position I drove the security narrative for connectivity between the IJS and a number of justice departments: DOJ, NPA, SAPS, BACSA, LASA, DSD, and DCS departments.

Johannesburg, Gauteng, Za

Johannesburg, Gauteng, Za

Served as a Senior Security consultant consulting to several companies on various aspects of Information Security in Microsoft based environments. Consulting included areas of: Design and Architecture, Management, Support, Deployments and Assessments. During this time Brett completed his qualifying criteria for ISACA’s Certified Information Security Manager (CISM).

I joined BCX as a Perimeter Security engineer in the 3rd Line Perimeter Security Consulting Team. During my time, I managed and consulted with various corporate clients and served as the Perimeter Security lead at Edcon, SASOL, Anglo Gold Ashanti, Metcash. I managed a host of Cisco firewalls hosted at BCX's National Data Centres. While at BCX, I was promoted to Team Leader, and in this role, I assumed responsibility for a team of 3rd line perimeter support engineers. I also took on various management roles in areas such as change management, risk assessment, client engagement, planning, CAPEX, OPEX, design, architecture, and various deployment phases while consulting with numerous business units within BCX.

Sandton, Gauteng, Za

Beginning my journey in the tech field, I transitioned from managing the helpdesk to joining the Technical Security Consulting division. Here, I underwent extensive technical training, covering the company's entire range of security products. The goal was to equip myself for designing, deploying, and maintaining high-level security solutions for corporate clients.As I moved forward, I started out as a Junior Security Consultant and eventually reached the position of Senior Security Consultant Team Leader. Throughout this journey, I played a crucial role in enterprise-level consulting. My expertise centered around Endpoint Protection, Gateway Content Filtering Solutions, Encryption Solutions, Patch Management, Vulnerability Management, IPS Solutions, and Enterprise Security Design and Architecture.I took charge of leading and executing major security deployment projects for well-known clients, including FNB, Standard Bank, Multichoice, Ster-Kinekor, Anglo, Nampak, MTN, Vodacom, Jonnic, SASOL, BCX, and various other corporate entities.

Cism, Information Security

Certified Solutions Architect - Associate

Matric Exemption, Microsoft And Cism Certifications

Information Technology

Diploma, Information Technology