Fraser Dickson, Cissp, Ccsp Email & Phone Number

London, England, United Kingdom

- Defining and coordinating the implementation of secure technology controls based on business risk across all areas of the firm- Acting as an ambassador for CISO department and deputising for the Chief Information Security Officer (CISO) as needed- Ensuring each security platform delivers the protection it was designed to achieve- Creation of supporting business cases relating to the changing, or the introduction of, security technologies or controls- Architectural engagement for IT projects to ensure appropriate security controls are implemented- Creation and maintenance of security standards/principles aligned to industry standard frameworks- Relationship owner of BDO’s Managed Security Service Provider SOC contract ensuring the service delivers the outcomes expected- Ensuring timely and effective management of security incidents and events, identifying root cause and follow up actions to avoid recurrence- Analysing trends from incidents, audit findings and any other applicable sources- Creation of, regular, high quality reports for all levels , including the Board to give assurance of the effective management of cyber security- Supporting the business in tender responses ensuring that clear and concise explanations are given to all requirements- Subject matter expert for all Cyber Security matters

- Define and coordinate implementation of secure technology controls based on business risk across all areas of IT infrastructure/services.- Subject matter expert for all IT security issues- Providing leadership in all activities that are important to IT Security- Making recommendations of risk minimisation strategies- Defining and coordinating the implementation of procedures to ensure security controls are considered in operational tasks, project delivery and IT governance processes.- Maintenance of an IT risk register and management of all risks through to mitigation/acceptance- Auditing compliance against documented IT security standards- Implementation of an assurance framework with audit and metrics- Ensuring timely and effective management of security incidents and events, identifying root cause and follow up actions to avoid recurrence- Following a risk assessment methodology and to identify preventive and corrective actions- Ensuring that all risk treatment actions are being progressed in timely and effective manner- Supporting in a coordinated programme of activity that maintains ISO 27001 compliance - Monitoring compliance with defined information security policies and procedures among employees, contractors, and other third parties and ensuring appropriate action is taken where risk exists- Creation of high quality supporting documentation of the IT security controls in place- Supporting the business in tender responses (due diligence) ensuring that clear and concise explanations are given to all requirements- Liaising with (escalating) security/risk issues to the senior management- Advising senior management of changes in the technical, legal and regulatory arenas affecting information security and cyber-security

London, United Kingdom

- Responsible for the mentoring and work allocation of the other engineers. Providing 3nd and 4th line support and dealing with the day-to-day technical issues as well as technical lead in project design and implementations - Daily operational checks using HP Insight Manager, Solorwinds Orion & SCOM, backups via Legato Networker- Installation of new servers including racking, cabling, and PDU’s. Also considering points of failure issues (Dual power units, Raid Controllers, clustering, network card teaming, UPS etc)- Daily / Monthly updates of McAfee & Sophos Anti-Virus software.- Supporting escalations through on-site & remote Helpdesk.- Software support / installations, packaging / testing and distribution of applications.- Logon scripts, group policy and registry changes.- Bespoke software and scripting creation- Raising RFC and representing to bi-weekly Change Advisory Board (CAB)- Creating knowledgebase articles, support documentation and procedures- Liaising with suppliers, evaluating, estimating and purchasing both hardware and software solutions.- 3rd line support for 500 Servers (physical and VMware & Hyper-V) & 3500 workstation clients- Hardware experience a mix of HP, Dell and Lenovo- Provide team leadership, mentoring and cross training as well as deputising for line manager when required- Key projects include: Windows 7 migration; Active Directory 2008 upgrade; Active Directory Federation; Sophos Anti-Virus & Encryption design and deployment; McAfee ePO and Endpoint Encryption design & deployment, Altiris & SCCM installation & maintenance; Data Migration (after company acquisitions & mergers)

- Provided support for bespoke e-forms solution to external clients and 16 channel - partners across the EMEA region- Rebuilding of internal support workstations and servers- Administration of Lotus Notes 5 environment- Troubleshooting of VPN issues for internal staff- Creation of software licence keys- Engagement with development team located in Asia-Pacific region

1ST/2ND TIER SUPPORT ANALYST & INCIDENT MANAGER - Lloyds Register of Shipping- Support of mixed OS environment, XP, 2000, NT, 98 & 95- 20-25 calls in addition to 20-30 emails logged per day with an approx 80% first contact resolution- Troubleshooting for Windows 2000 Servers, OpenMail, password resets- Imaging of workstations via Norton Ghost1ST/2ND TIER SUPPORT ANALYST - ExxonMobil- Support of Windows NT workstation environment, supporting user base of 12,000 staff- Adhered to strict SLAs for the client, requiring a 70% first contact resolution – consistently achieved a 90% FCR- Training and mentoring of new analysts- Engagement with domestic and international resolvers to ensure issue resolution- Submission of knowledgebase articles to client intranet