Daniel Savage Email & Phone Number

Leeds, Gb

Goole, East Yorkshire, Gb

FTSE 100 chemical and pharmaceutical manufacturer – £1.6 billion revenue – global footprint – 6000 employees – multi-million pound investment in cyber – part of IT Leadership team – 8 direct reports Responsibilities:• Building a security function from inception. Developing the risk assessment, strategy, budget and key messaging to drive information security forward globally across corporate and manufacturing environments. Utilising the NIST CSF. • Responsible for Group IT Governance, Risk and Compliance. Ensuring legal and regulatory compliance for IT globally. Including challenging environments such as China and complex regulation such as UK Corporate Reform. Achievements:• Initiated the largest cyber security project in Croda’s history to deliver threat detection, vulnerability management and regulatory aligned Operational Technology cyber security policy to Croda’s key global manufacturing sites. • Delivered six figure value to the business by reducing the cost of cyber insurance through increased maturity of controls and increasing the coverage of the insurance to mitigate risk. Annually improving on bench marking scores. • Created and delivered Executive and Board level communications on a regular basis to ensure key internal stakeholders were continually appraised of the current risk landscape and the state of the information security programme. • Developing the skillsets of the internal security resources at Croda to futureproof the teams capabilities.

Bradford, West Yorkshire, Gb

Utilities sector – £1.1 billion revenue – part of the UK’s Critical National Infrastructure – 2500 employees – multi-million pound investment in cyber – 7 direct reports Responsibilities:• Setting the strategy and aligning security controls and governance to ISO 27001 to meet UK critical national infrastructure regulation. • Leading a team responsible for real-time analysis of immediate threats and triage within the Yorkshire Waters environment.Achievements:• Reconfigured the information security processes to deliver a clear narrative of risk identification through to agreed action, aligned to the ISO 27001 standard to enhance the ability to respond to threats and reducing potential disruptions.• Developed a cost-effective and proportional risk mitigation program, optimising resource allocation and enhancing the return on investment in security initiatives.

Harrogate, Gb

Fast Moving Consumer Goods – £260 million revenue – global footprint – 1600 employees – part of the IT Leadership team Responsibilities:• The information security leader responsible for overseeing all elements of information security across the Group.• Set the strategic direction for information security, developing and executing the annual security plan, and reporting security levels and associated risks directly to the CFO and CEO. Achievements:• Successfully led the effort to gain ISO 27001 certification within a 24-month timeframe, starting from a position of no existing control framework. This achievement significantly enhanced the organisation's credibility and trust with stakeholders following a significant cyber incident. • Transformed the culture within the IT department regarding information security. This cultural shift not only reduced risk but also fostered a more proactive and security-conscious environment.• Led the information security requirements for the transformation of online hosting and development processes for the transactional websites, ensuring that security was embedded from the outset, which safeguarded the integrity and availability of critical business services.• Mentored and developed the security awareness of 38 IT department resources, significantly raising the overall competency in managing information security.

London, England, Gb

I provided internal, and client facing, corporate security consulting services. Work as the subject matter expert alongside an enterprise architect to create secure solutions for clients. Responsibilities:• Maintaining the PCI DSS security standard where payments are taken for enterprise clients. Working extensively on the CCM’s strategic payment solution for clients.• Responsible for ensuring that CCM was in control of security risks, complying with contractual security requirements and following security policies. • Provide security subject matter expertise on projects undertaken by business units, application development and architecture teams for client solutions and internal projects. Achievements:• Created the internal processes and associated polices for security testing, third party due diligence and the guidance document for securely connecting client and Capita networks.

This role was focusing on the design and execution of an information security framework based on ISO 27001:2013 principles from its inception. Additionally responsible for the co-ordination and response to information security requirements across the group, both from the business and within IT, and externally on client audits and tenders.Responsibilities:• Designed, documented and successfully implemented the processes to be used by the IT department in responding to major business continuity and security incidents. • Responsible for ensuring ongoing compliance with the Data Protection Act and Solicitors Regulatory Association from an information security perspective whilst working toward ISO 27001:2013 certification for Parabis Management.• Coached the internal development teams in security awareness and secure coding standards. Achievements:• Established the risk management framework from scratch within the IT department for identifying the major risks, impacts and mitigating controls required. Reporting to the CISO.

London, London, Gb

Responsible for the creation, implementation, maintenance and enforcement of security policies and procedures across multiple customer solutions meeting internationally recognized standards such as ISO 27001 and PCI DSS. These systems are audited annually to ensure ongoing compliance. Responsibilities and achievements:• Developed a unified security strategy across the business that successfully interacts with corporate IT standards and customer solution requirements.• Responsible for staff training and awareness to ensure conformance as well as disciplinary procedures.• Successfully lead and passed a first year ISO 27001 audit from scratch.

Seattle, Washington, Us

Blue Bell, Pennsylvania, Us