Harold B Email & Phone Number

Melbourne, Vic, Au

Victoria, Au

Victoria, Au

Leading multiple security assurance engagements including - 1. APRA CPS 234 compliance program and tripartite audit2. PCI DSS Compliance Program and Certification Audit3. Annual ITGC (Information Security Controls) audits3. Multiple internal audits4. Controls effectiveness testing program (CAP)Also leading :1. Development / refresh -update and maintenance of the security controls framework and management of the risk, controls, actions and obligations register.2. Security GRC engagement for multiple business initiatives including new client acquisition, M&A, business and technology solution implementation and more.3. Security governance and oversight of critical technology process and systems.4. Development of security incident response documentation framework.

Chicago, Illinois, Us

Delivered multiple security advisory and consulting projects including ISO 27001 and NIST CSF aligned cyber security uplift programs,, security audits and more.

Melbourne, Vic, Au

Delivered multiple security advisory and consulting projects including ISO 27001 and NIST CSF aligned cyber security uplift programs,, security audits and more.

Doha, Qa

Responsible for oversight and coordination of the Information Security - Governance, Risk and Compliance program within QNB Group. Establish policies - standards - procedures and controls to assure compliance with applicable regulatory and legal requirements as well as global standards like ISO 27001 & PCI DSS. Promote and enhance enterprise IS Security awareness program. Maintain expertise on security trends through research and development in order tomitigate potential security exposures. Provide analytical support to key stakeholders regarding GRC metrics, reporting, and special projects.

Doha, Qa

Responsible for continuous enhancement of the QNB Group cyber risk management function. Other tasks include - development of security strategies, policies/standards, advise on embedding security and risk management in projects, development and implementation of robust data protection program, threat and vulnerability management, security product implementation, audit and compliance management, incident response, security operations, security awareness and training.

Perform risk management activities to reduce residual risks associated with IT systems and business processes . Perform security reviews and assessments to review control effectiveness and compliance to regulations and best practices. Coordinate 3rd party vulnerability scanning and penetration testing program. Lead the ISO 27001:2005 certification and the PCI DSS compliance program.

Reston, Virginia, Us

Execute ISO 27001:2005 compliance and certification programs for clients in the financial services vertical. Conduct security assessment and threat - vulnerability management activities. Conduct information security audits. Deliver information security training and awareness.