Evan Wootton-Haley Email & Phone Number

London, England, United Kingdom

Secondment July- DecemberPromoted December• Reporting directly to the CISO, managing a team of 6 (1x Technical Manager, 1x Technical Support, 1x Information Security Manager, 3x Data Security Analyst)• Relationship Owner between Managed Service Provider (MSP), covering 4 Data Loss Prevention (DLP) tools across the Windows & Mac estate. Relationship owner of Private Content Network (PCN) • Manage the DLP programme, covering both technical and BAU of; Cloud Access Security Broker (CASB), DLP Endpoint, DLP Mail Transfer Agent (MTA), Data Classification, Data Discovery Scanning• Policy management, Alert monitoring (Level 1,2 & 3), Incident investigation (forensics), Lessons learnt• Owner of Data Classification Program - Implement data classification, lead training to Exec, town halls, drop in sessions, create on-demand training, create written support, manage comms plan.• Lead DLP Steerco • DLP Deployment Programme - Leading the DLP Steerco through deployment and implementation, working with cloud platform team, network architects, workplace support, developers & engineers. • Ownership & Accountability quarterly controls (KRI) covering JML, Admin Access, Sensitive Systems, Confidential Incidents, Clear Desk, Unapproved software

Gaydon, England, United Kingdom

• Sole Supplier Information Security Auditor (Offsite/ desktop reviews due to COVID-19 restrictions). – SOC 2 review experience throughout. • Manage and develop relationships with Purchasing (Procurement), GDPR Purchasing, the wider Information & Cyber Security Team, Data Owners, and the Supplier directly. • Develop the Supplier assurance process including designing and implementing; Report Issued Tracker, Finding Tracker, standardised risk categorisation, standardised report template.• Lead the Supplier assurance programme through RFP, Supplier Onboarding, Supplier Exit process and the individual supplier risk management throughout.• General excel management allowing delivery and advancement of the KRI/KPI communication with Senior Management.• Detailed analysis & improvement of the Supplier Assessment/ Question sets based on ISO 27001 principles. Creation, design and workings of the Supplier Impact Triage Assessment to automate and calculate Supplier Impact Rating (Excel VBA Macro project). • Create and develop a Supplier Assurance (Annual) plan giving supplier review cycles depending on supplier criticality.• Support the procurement of a key partner for critical supplier assurance from large consulting groups.

Milton Keynes, England, United Kingdom

The Data Asset Inventory was a collective of data stored in Excel documents which was migrated into a SureCloud solution. Along with data assets and systems it captured; Data Types & Volumes, Third Party Flow, Access Controls, Data Processing, Retention, Cryptography, Data Subject Rights, Data Field Sheets.• To create, develop and implement the Data Asset Inventory Strategy and development plan working with; CISO, Data Governance Risk, Access Control Working Group, DSAR team, DPO, Information Security Risk, Single Sign On Project, and Third Party Assurance.• To automate the Data Asset Inventory processes while redefining the outputs to better cater to company needs.• To maintain the inventory as a GDPR control• Matrix Management Experience• To manage the Quarterly Privileged Access Review process of the Data Asset Inventory system as part of the access control programme covering 500+ assets/ systems.• Own key IAM KRIs• Support Internal Audit• To continue leading the 3PA SureCloud V2 project• To continue supporting the risk manager for both 3PA and the data asset inventory.• To provide soft and technical skills development for the wider Data Governance team covering public speaking, excel, reporting and SureCloud workshops

Milton Keynes, England, United Kingdom

• Reviewing Medium and High rated suppliers based on Annex A of ISO 27001 through desktop review and onsite audits. Following up by creating and issuing Risk Reports direct to suppliers. The scope of this does include the reviewal of SOC 2 reports.• Lead the development of Third-Party Assurance (3PA) systems and internal processes including; Management, communication, logic, process, and design of 3PA SureCloud V2.• Driving vital team analytics and reporting through my knowledge of excel giving clear direction to meet departmental objectives – Including the wider team for the Data Governance Committee • Aiding others personal development within the team as a mentor including both risk & inventory• Continued support for SureCloud Inventory reporting and document maintenance• Designed, built and implemented a Risk Repository and dashboard making a single location for risks from PCI, Third Party Assurance, and Data Inventory to present a business impact.

Milton Keynes, England, United Kingdom

• System/ Data Inventory Database management, maintenance, and support.• Testing/ Regression testing and supporting SureCloud System/ Database Migration • Creating Excel based team reporting/ queries using VBA and Macro functions• Corresponding with key stake holders (data/ system owners)

London, United Kingdom

• Manage and develop the training for Apprentices & Graduates covering; Commercial, Quantity, Building Surveying; Planning Development, Building Engineering Services, Residential, Interior design totalling 92 Graduates and 34 Apprentices. • Day to day support for all Early Careers programmes• Support with the recruitment cycle; School outreach, university career fairs, reviewing applications, running assessment centre days, interviewing candidates, selection, candidate feedback. • Regional learning administrator for Workday Learn covering; queries for EMEA; training internal staff; UAT2 testing for quarterly releases. • Development and implementation of a new Early Careers training programme for internal colleagues to become chartered. • Relationship management with Apprentices through to International partners, external trainers through to professional institutes. • System Owner • Streamlined and developed internal processes and procedures to drive team efficiency. • Supported with; Partner & International Partner selection; Graduate Rotations; Newly Qualified process; Internal recruitment• Organised & managed internal RICS APC Case Study & Full Mocks achieving 100% pass rate for spring 2019 sitters.

Milton Keynes, United Kingdom

Supporting Sainsbury's Argos with GDPR compliance via; • Corresponding with key stake holders (data/system owners)• Completing and maintaining system inventory and contents• Creating key documentation and flows on processes supporting the implementation of the Subjects Access Request (SAR) process • Supporting with the risk assessment of systems

Milton Keynes, United Kingdom

I worked within Argos for Business as a Service Coordinator.• Managing and resolving service impacting incidents for external clients and internal colleagues• The Team’s top incidents resolver and escalation point.• Led vital company projects working with developers, clients, senior management for a new payment method on gift cards meeting wider business objectives.• Reported and led weekly team meetings.• Managing major internal incidents with internal and external stakeholders • Developed, presented and trained internal teams in process improvements • Received internal recognition and feedback from numerous departments from peers and senior management.

Casual work helping support families with children with disabilities at the child’s home and on day excursions.

Buckingham

Casual worker helping support young people and children with disabilities one evening per week. I was working as part of a team.

French Language

Studied French language and culture from September 2017-November 2017

Bachelor’S Degree, Environmental Design/Architecture

Activities and Societies: SHArc (Sheffield Hallam Architecture Society)In the second semester of the second year i studied in Vilnius.

Bachelor Of Architecture - Barch (Semester Abroad), Architecture, Upper Second-Class Honours

Modules: Basics of Landscape Architecture Contemporary Architecture Development Project of Small Town History of Architecture Lithuanian.

High School, A-Level

A-Levels: -Maths -Economics -Business Studies AS-Level: -Graphics Other: Young Enterprise