Jonathan Slaughter Email & Phone Number

Vernier, Geneva, Ch

London, Gb

My time at Babylon was focused largely on the end-to-end re-architecture of how security risks were identified and managed across the organization. This role worked inside the Technology team, reporting through senior security leadership and to the CTO. This role required significant cross-functional engagement and partnership. I was able to successfully forge relationships throughout many of our departments to generate and lead significant, sustained change in how our organization approached security risks within the larger corporate risk strategies and enabled the business to move forward at the appropriate velocity. To accomplish this, I invested in:- partnering with IT, Procurement, and Data Privacy leadership and personnel to align risk strategies and tooling within the overall supply chain management strategy;- authoring client-facing risk assessments, treatments, and management reports, including direct support for pre-sales and account management functions;- the design and implementation of new GRC tooling within our Product/Tech functions, and integrating within current tooling across and up into the larger Compliance & Risk function;- the day-to-day mentoring and leadership of the security risk management team within the larger GRC functions;- in leading and managing the cybersecurity requirements of the revised Medical Device Cybersecurity Guidelines (MDCG) requirements for our global offerings to help maintain ISO 13485 and ISO 14971 certification; and- in the direct support of the HITRUST 9.3 certification for Babylon upon my arrival to the organization; and helping to direct the support of both the interim assessment, as well as the SOC 2 Type II re-attestation.

Austin, Texas, Us

In this role, I was directly responsible for the organization's understanding of risk to ourselves and our customers. This required significant re-architecture of the organization’s approach to security risks, and communication of those risks throughout all levels and functions within the business. As a primary function of my role, I developed specific HIPAA Compliance training engineered for our organization’s role within the healthcare supply chain, and integrated unique modules within the larger training suite for privileged roles such as developers, support personnel, and system administrators. Re-architecture of our security risk and compliance programs also required me to spend a large amount of time talking with our customers and prospects about our approach to security, both internally and for the cloud environments we managed on their behalf.In my almost 4 years here I:- scheduled and performed all risk assessments and risk management; supporting internal and external audits; compliance and certification requirements. This includes HIPAA, HITRUST, SOC 2, ISO and GXP/QSR. - successfully led two HITRUST re-certifications (9.1 and 9.3), and four SOC 2 Type II attestation audits. These results, in coordination with our sales operations, led to over 40 new logos over 3 years.- implemented ISO 31000:2018 risk methodology and an organization-wide GRC program, including standardization of approach, tools, and language throughout the company.- re-architected the vendor risk management program used by IT & Purchasing, creating a risk program that evaluated the vendor against objective scales, then set expectations. This particular project drove significant standardization and mitigated vendor redundancy and cost by over 60% in the first 18 months.

New York, Ny, Us

• I managed Information Security, Risk Management, Quality Management, and helped design and deliver the Management Development Program. • I was responsible for designing, implementing, and maintaining security programs within service operations - as well as across a varied set of customer-facing technology offerings. • I managed the security and risk integration of a major Life Sciences acquisition and used my experience with GXP to help support some of the changes as the group matured, as well as led the training to the rest of the company on healthcare-specific requirements to comply with current global legislation.• I worked with our vendor and procurement teams to re-architect our entire vendor and contractor program to mitigate security risks of using over 10,000 freelance contract translators from over 150 different countries.• As the Privacy Director, I led the re-design of all internal and client-facing policies and procedures to align with GDPR 6 months prior to it coming into force.• I led the Diversity & Inclusion working group, starting it from scratch.

Maidenhead, Berkshire, Gb

Responsible for ensuring all internal auditing for both privacy and information security within our SaaS environments. Additionally:• I was responsible for the maintenance and expansion of ISO 27001 certifications across all facilities and operations supporting our SaaS applications. Successfully uplifted existing ISMS from 2005 to 2013 version of standard.• I architected unified privacy program for all SaaS products, as well as supporting other parts of the business with privacy-related concerns and risks. This included leading the re-design of the entire US organization and its subsidiaries across both services and SaaS products.• While focused on SaaS products, I was the de facto resource related to global privacy and data protection regulations for the entire organization. This included, but was not limited to, data processing services such as translation and professional services, as well as data collection in the cases of HR, Legal, Marketing and Finance.• I managed a cross-functional team within Cloud Services to deliver improved Business Continuity and Disaster Recovery options to our clients within SaaS environments. Additionally, I provided guidance and support to other parts of the organization (Internal IT, HR, Legal) regarding specific areas of interest and need.• I created, implemented, and managed all training associated with Information Security, Privacy and BC/DR within the DevOps organization, and supported other parts of the company with these offerings.

Maidenhead, Berkshire, Gb

In this role, I was responsible for the information security management system (ISMS) for our organization. I managed a internal audits for information security and GRC. I worked with cross- functional teams from Quality, IT, HR, Legal, Operations and Facilities to deliver a comprehensive approach to managing secure services continuity and delivery. Additionally:• I was responsible for the maintenance and expansion of organization’s ISO 27001:2005 certifications across all facilities and operations. Led uplift to ISO 27001:2013 and redefined risk management profile under ISO 31000:2009 framework and guidelines.• I managed the creation and expansion of business continuity and disaster recovery practices throughout the global organization, using ISO 22301:2012 standard.• I supported the maintenance and improvement of the Quality Management System (QMS) and the internal audit process across the organization for ISO 9001:2008.• I led the management of on-site client audits related to Information Security, and when needed, Quality Assurance.• I created and delivered new hire and re-certification training for Information Security awareness across global organization as part of ISO 27001:2005 certification.Additional responsibilities:• As part of SDL’s Quality & Infrastructure group, I helped deliver training to managers from across all divisions over the 4-day SDL Management Development Program. Training was delivered via two trainers in a live environment, with 1-to-1 coaching and mentoring beyond, where needed.

Maidenhead, Berkshire, Gb

• Developed secure solution architecture incorporating services, project management, technology and business continuity for Fortune 500 companies and their localization needs.• Successfully developed and delivered training to client and internal team members on industry best practices for content creation and information management. Wrote and developed training modules and programs currently used throughout organization, including modules for management & leadership development, global authoring, voice unification, interpretation solutions• SME for the interpretation, as well as the application of federal and international standards for information distribution within client solutions to ensure regulatory compliance across many industries – includes ISO 9001, 13485, 14971, 27001, 14001 and Safe Harbor• Helped over 20 client champions gain Six Sigma Black Belt Certification by using localization and other business process improvement as a foundation for process excellence within their organizations• Led project teams comprised of sales, operations, technology and executive management members on a consistent basis to create specific solutions for each client that provided appropriate revenue and margin performance• Led the re-structuring of a multibillion-dollar medical client’s contact center operations, to include multilingual requirements and unifying processes across multiple global sites. Increased productivity by 12% and customer satisfaction by 16% in the first 12 months.• Partnering with the global quality assurance team in UK to get North American operations audited and compliant for ISO 9001:2008 and EN 15038:2006 re-accreditation; as well as initial accreditation in ISO 13485:2003.

Armonk, New York, Ny, Us

In this role, I was responsible for a large warranty claims group that handled a diverse manner of issues including Product Allegations, Alternative Dispute Resolution and lawsuits. I worked with the vendor supplying our service representatives and managed to KPI’s for both our internal requirements, as well as the metrics set forth by our client. While in this role, I:• Managed a multi-tiered team of client and vendor teams responsible for response and resolution to all client “Lemon Law” claims for new automobile sales• Redesigned quality assurance process and delivery dashboards using J2450 standards• Reviewed, analyzed, and updated budget expenditures in financial information management system• Reviewed and analyzed contractor financial statements to determine contracting model efficiency and ROI• Led quarterly business reviews with senior members of client team – driving Root Cause Analysis and Six Sigma methodology to all performance outliers. Created and delivered training to improve and correct outliers, then incorporated that material into the new hire training.• Presented cross-functional shared services support modeling to streamline client support processes across all global contact sites

Armonk, New York, Ny, Us

In this role, I worked with every division within the global contact center for the automotive client. This included Customer Assistance, Marketing Support, Dealer Support and the Business Resource group (Legal). I led initiatives for each, as well as overall to deliver improved models of quality and efficiency. Some of these projects included:• Developing all quality assurance for client contact center operations• Redeveloping quality assurance guidelines to reflect independent customer feedback (CSAT) scores more directly• Driving internal process efficiency initiatives through automating quality control forms for faster submission, tracking and reporting• Leading the development and training of 10-15 quality assurance professionals during the first12 months while additional resources were hired and trained for personnel management requirements