As the Chief Information Security Officer (CISO), I lead efforts to protect the organization's data and systems by building and executing a security strategy that aligns with our business goals. My focus is on identifying risks, ensuring compliance with regulations like GDPR and PCI DSS, and implementing measures that keep us secure. From developing policies to managing security incidents, I make sure we're always prepared for any challenges. I also run company wide security training to foster awareness and build a culture of security. Additionally, I work with different teams to make sure security is built into everything we do from the start, helping the company stay protected.

Day-to-day duties require supervision of the Technical Department, managing multiple projects and the department members of staff. Specific duties include:• Recruiting, training and managing staff• Conducting regular performance reviews and annual appraisals• Reviewing project requests to alert the sales department of feasibility issues and suggesting possible alternatives• Designing project plans to meet client's requirements and attending sales meetings to present possible solutions to the client• Allocation of project work between the team taking into account workloads and skillsets• Ongoing project management to ensure deadlines are met without compromising quality• Final integration of the work units and testing phases including plans for resolution of any subsequent defects identifiedIn addition to staff management, the role also includes responsibility for the company’s technical infrastructure. Specific tasks include:• Managing Information Security for the companies Level 1 PCI DSS 3.2.1 compliance and ensuring all ongoing work adheres to established procedures. Collating information for audit purposes and as evidence of ongoing compliance • Designing, building and managing new platforms to integrate with existing systems• Planning upgrades to current installations and, upon their end of life, preparing replacement and migration or decommissioning• Implementing virtualization and high availability solutions to ensure all systems perform with maximum up-time• Ensuring a secure network through regular testing of security systems and processes as well as tracking and monitoring all access to the network• Managing faults within SLA’s and liaising with clients to keep them informed of progress and resolution times

• Writing and maintaining SMS and IVR Services using SQL databases combined with front-ends written in Visual Basic 6 and .NET Framework• Administering the company network across multiple sites including extensive use of DNS, DHCP, Active Directory• Administration and management of Windows web servers including use of IIS, virtual directories, SSL, user permissions and security • Setting up and managing VPNs to control traffic flow between sites and allow external worker access• Supporting Microsoft Exchange Server including spam and antivirus software• Extensive use of Microsoft SQL Server and MySQL