Managing Director at Cyber Security Consulting LtdSenior IT Security Executive and Consultant

personal time-out and family rebuild

Member of the UCC Risk Board tasked to build/strengthen the second-line-of-defence area, while simultaneously transferring the first line-of-defense tasks of the IT Security Management area to the competent IT departments; I established PCI DSS in the IT risk & security disciplines with collaborations across all the key products such as WAY$, WAY@SEVEN, etc. Strategically involved in the preparation of risk taxonomies and scenarios, including definition of mitigating measures and key procedural controls within the framework of the UCC risk governance structure, I created gap analyses against external requirements (PCI, VbV, EY, UBS Policies), further reporting and alerting with Tenable products such as Correlation Engine and Security CenterKey Achievements:o Industriously transformed the function as Head IT security from a highly operational to an increasingly consultative role in order to implement a new operational model.o Enhanced staff training & field security awareness according to the regulations of the PCI Security Standard Councils (SSC). o Meticulously organised IT audits, reducing audit costs by 20% through efficient preparations and professionalisation.o Diligently improved technical & procedural weaknesses, expanding and strengthening IT Security and its Risk Control Framework due to new requirements from customers (UBS), FINMA and PCI DSS V3.o Led the execution & certification of the project "Secure Data Processing" as the project manager, with first-time PCI DSS compliance and its subsequent annual re-certification.

With oversight of 2 group leaders, 6 project managers and a team of 14 senior employees reporting directly to me, I was responsible for the seamless installation & operation of the full spectrum of issuing systems, that included: back-end systems, card management, authorization, fraud, collection, secure e-commerce, disputes, invoicing, interchange, payment streams, systems on z/OS and Unix platforms. Deployed as an SDP Project Manager (Secure Data Program) to achieve the PCI Compliance as of April 2010, I shared co-responsibility for the preparation of processing offers for various international customers; additionally, managing card conversions from Cardpac (VM/VSE) and external partners on z/OS (Essent is Issuer).Key Achievements:o Appointed as the Deputy Director in 1999, I was steadily designated to take up strategic positions as the Head of Department in 2000, and later as a Director in 2003 on account of consistent excellence in performance.o Diligently established the Project Management Group over the years, enabling recruitment of several senior managers.o Meticulously secured & negotiated contracts with VISA, MasterCard, SW Providers and major UCC clients such as UBS.o Ensure full compliance with all national, international & company laws through the entire credit card processing lifecycle.o Implemented multiple strategic projects, executing & influencing critical initiatives as a Member of the IT Strategy Board.o Ensured superior IT availability across all platforms, increasing department efficiency via process redesign/optimisation.o Played a key role in positioning UCC as an international processor for the UBS Group (in Europe), as well as for third parties such as PostFinance & SCS Alliance.

Data Protection Officer/BRS Coordinator, UBS Card Center AG, Switzerland 1996 - 1999Credit Suisse, Project Manager/Database Engineer, Credit Suisse, Switzerland 1994 - 1996Programmer/Systems Engineer, Zurich Insurance Group, Switzerland 1985 - 1993