Graeme Marsh Email & Phone Number

Glasgow, Gb

London, Gb

Glasgow, Scotland, Gb

CISO at cloud provider Beeks. We enable financial institutions the ability to scale low latency environments to their needs. With an ever-expanding number of venues and exchanges directly connected to our cloud, we reduce the cost and time to market for both buy and sell side organisations.My role is to get Cyber Security the best in business. Creation of strategy, policies, remediation, cyber programme, defining ISMS and security Framework. A major part of the role has been to achieve ISO 27001 certification. The role covers all aspects of Information Security, Business Continuity&Resilience, Technology Risk Management, Incident Management, Data Protection, IT, Application Development and Networking. As a member of the executive at Beeks I provide regular Board updates on security plan and risk profile across the group.I am also the groups CIO and Data Protection Officer (DPO) in charge of GDPR, privacy compliance globally and IT and Application development teams.Key Responsibilities include: Developing and implementing overall company Security Policy  Identify any current Security issues within existing estate  Threat Intelligence and Assessment  De-risk any initial security issues and manage threats Develop and maintain a strategy for overall security improvement  Design and implement a incident management policy and real world testing of said policy  Lead responsibility to obtain and maintain ISO 27001 accreditation and required further accreditations in the Security area subject to business requirements  Design and ensure secure systems both physically and logically for both the Beeks Corporate environment and our Cloud locations globally.  Work with internal teams to ensure Beeks products set security baseline is of an acceptable level given the nature of the Beeks business

Glasgow, Scotland, Gb

Managed and developed Cyber Resilience Strategy & Architecture, delivering Cyber Security & Resilience Programme and maintaining effective controls that align to business risk appetite and requirements.Leadership of cybersecurity, compliance, security architecture, 3rd party management, information risk management, privacy (GDPR), change, security program, strategy, threat intelligence, security engineering, consultancy, projects, payment security, security framework, security operations and security assurance. Executive and Board reporting on risk profile, regulatory interaction and business engagement.Defined, implemented and oversee the cyber controls framework, based on NIST, including business risk appetite approved by board and executive.Strategically leverage technology, process and talent to protect confidentiality, integrity and availability of information to our customers, clients and employees. Passionate about mentoring and developing my team and talent with a selfless drive to ensure I maximise talent and opportunity for my employees and those across the business.Develop and maintained strong relationships with business leaders across the enterprise with integrity, honesty and zest for collaboration.Executive sponsor and manage a £6m cyber improvement programme as well as manage BAU activities and budgets.

Glasgow, Scotland, Gb

Led the Information Security, Technology and Resilience Risk Team. This included oversight and challenge of all Cyber Security, Data, Data Protection, Operational Resilience, Information Technology and Operational Risk within the Group.Developed and maintained the Technology, Cyber Security, Privacy, Data and Resilience Risk and control frameworks aligned with group risk appetite and international standards - ISO 27001, NIST, COBIT and ITIL.Provided leadership, oversight and guidance to Virgin Money Executive and Senior Management on technology, information security and business continuity risk issues. Provided expert leadership on InfoSec and Business Continuity, ensuring risk is effectively managed.

Edinburgh, Scotland, Gb

Developed and led a large Information Security & Risk team during a significant period of transformation. My key responsibilities included Security Governance, IT Risk Management, Business Security, Data Protection, Records Management, Security Assurance and Audit, 3rd Party Assurance, Security Culture and Security Consultancy Services. During my time at Standard Life I was significantly involved in promoting Leadership Development, Leadership Teams, IT Operating Plans and Strategy.

Worldwide, Oo

Gb

Melbourne, Victoria, Au