Responsible for reviewing and providing security consultation to the business on project initiatives when engaging third parties or onboarding new vendors.- SaaS security reviews during onboarding to adhere to enterprise information security policies, industry frameworks and best practices (NIST CSF, CIS Controls v8, ISO 27001, OpenSSF CII badges, etc.).- Centralised risk reporting and management within GRC platform. Ensuring findings captured, issues linked to engagements are appropriately tracked to applicable controls until resolution.- Third party risk management including assessment, identification, communication and high-level solutioning of findings to varying internal stakeholders (non-technical staff, executive managers and/or solution architects).- Refresh and create new process to improve existing security controls. Ultimately automating whilst providing the same value quicker to the business.Also responsible for supporting the Domain Security Architects on the team.- Manage the Security Architecture Governance forum enabling the gathering of key stakeholders to discuss, collaborate and endorse varying architecture artefacts such as patterns, roadmaps and technology deviation decisions.

Lead IAG's developer secure coding educational program to increase developer identification of OWASP Top 10 risks in simulated environments. Gamify the platform and creatively generate milestones for developers to continually analyse code to enable developers and code reviewers the potential to build and spot safer coding practices and habits. - Identify enterprise risks to guide developer focus on in relation to application security vulnerabilities- Dashboarding of developer improvements and trends over time across various programming languages- Present to IAG's Board to showcase program's ability to mitigate risk and provide value to the business.Also responsible for the technical content at IAG's awareness and outreach initiatives. Lead IAG's phishing simulations for IAG Group as well as subsidiaries to improve employee detection of trending threats to reduce email and SMS phishing risk. This included:- Work with IAG's blue team to develop relevant trends for consumption- Engage with stakeholders with varying roles and experiences to shift and motivate.- Support and troubleshoot Outlook tool when there were challenges for employees and ensuring operational effectiveness.- Off-site subsidiary sessions with large audience groups to assist with adherence to regulatory obligations.- Organise and lead personalised consultations with high profile audiences within the business to provide tailored experiences ranging from social engineering for front-end staff to whaling type attacks against EA's of Executives.

With offices in Shanghai and Vietnam, IT Consultis is a dedicated digital agency strongly committed to research, layout, and deploying only the best digital solutions. Offering a wide array of services ranging from entirely tailor-made web development projects to apps, eCommerce, and in-store experiences; all while working with some of the major brands in the world including GAP, Zara, Porsche, Decathlon, Budweiser and Leica.Being able to work side-by-side with project managing directors, Drupal and Magento developers, and executives allowed me to analyse high-level managerial proficiency among a geographically and culturally diverse team dealing with large projects for fortune 500 companies.Companies with projects I had been involved in include:- Land Rover & Jaguar- Carl F. Bucherer - American Chamber of Commerce (AmCham)- Teva- Shanghai La French Tech- Shanghai Young BakersMy roles and responsibilities within the company include:- From the first day, I was accountable for developing and adjusting the pipeline and schedule for the solo project which successfully met client scope on time- Liaised between external clients and internal developers to translate business to technical requirements by utilising BugHerd to deliver efficient communication- Successfully organised project requirements and time measurements to ensure project delivery was on time for projects I was involved with- Collaborated with Project Managers to deliver project reports and meetings to clients/stakeholders with positive feedback- Proactively maintain consistent and professional client relationships during all projects involved in throughout the schedule- Contributed to daily team meetings for concepts and ideas to further improve client satisfaction analysing past methods, for present and future clients-Assisted with quality assurance testing on projects for aforementioned clients working on CMS platforms such as Drupal8, InVision, and WordPress utilising HTML+CSS widgets