Kendric Tang Email & Phone Number

Middlesex, England, Gb

- Provide leadership and subject matter expert in the design and build of security architecture, making recommendations that drive global strategy and managing the implementation advice of new technologies and processes in line with best practice and policy direction.- Provide security assurance services such as infrastructure penetration testing, mobile and web-based application penetration tests, product security assessments, and red-teaming capability. - Provide the capability to deliver security assessments, educating the business on the inherent risks, security training, digital forensics, assist in security improvement and developments, providing meaningful hardening and mitigation management and strategies to assist stakeholder in meeting their security requirements and policy obligations.- Provide thought leadership in information security defence and response.- Identify areas of weakness or vulnerability where a failure in system, application or network security would result in serious financial loss, erosion of market share, loss of client confidence, reputational damage or other serious business impact.

Middlesex, England, Gb

- Responsible for the protection and security of company's assets and its associated networks by leading and executing internal and industry threat management practices. - Protecting the confidentiality, integrity and availability of company's key information assets and ensure company meets its compliance obligations. - Involved in setting a up brand new security assurance function from ground zero- Create, maintain and expand Information Assurance portfolio of services- Leading a team of security consultants responsible for performing various security assessments, educating the business on the inherent risks, and providing meaningful hardening and mitigation strategies- Perform and manage application security assessments, penetration testing, data leakage, network and system forensics, and testing the design and effectiveness of security controls of Internet systems, networks and applications.- Interface with C-levels and contribute to key security decisions, metrics and improvements.

Role Description:Conduct, carryout and comply with the security schedule of the customer contract.The security manager is to analyse & access the risk, impact of exploits and vulnerabilities, and to initiate the remedial actions requires to mitigate the risk to all C&W global infrastructure, services, platforms and systems which we provide to our varied and valued customer base:• To protect the confidentiality, availability and integrity of information, and maintain the technical mechanisms of legitimate access to it.• To manage and monitor real-time security events that emanate from all devices under management• To compile statistical reports and metrics on key security devices and infrastructure• To support the virtual security team in development of producing business case's by providing the associated solutions costs and by working with the bid team to identify the impact on all areas of the solution – service and project management• Monitoring advancements in information security technologies and practices• Monitoring changes in legislation and accreditation standards that affect information security• Initiating, facilitating, and promoting activities to foster information security awareness within the organization• Monitoring compliance with the organization's information security policies and procedures among employees, contractors, alliances and other third parities and referring problems to appropriate department managers and administrators• Performing information security risk assessments and serving as the internal auditor for information security processes• Internal operational information security• PCI Consultancy• Intrusion detection & protection• Vulnerability assessment scanning• Penetration testing• Digital forensics• Vulnerability research• Security metrics reporting• Security policy compliance & management• Security policy development• Security device research• Customer demonstrations & briefing

To manage consultants within the technical team and the performance of the team in delivering IRM business objectives and ensuring consistent high levels of client satisfaction, whilst managing client work and projects. Which includes:• To work closely with, and assist, the Operations Manager, the CRO and the CTO.• To participate in and deliver information security projects on behalf of our clients. To participate in teamwork and activities relating to information security, including research and development. To maintain an accurate and current knowledge of information security issues and principles across the broad spectrum of the discipline. • To identify improvements to the technical team in terms of tools, techniques, methodologies, templates & report standards, areas of work, business opportunities and to ensure their management, implementation and delivery. To build relationships with academia, standards bodies, the government, institutions and other organisations. • To ensure junior consultants receive mentoring from an elected member of the technical team. To provide industry presentations to the team, clients and conferences. To assist the pre-sales department with scoping of complex client requirements. To set the standards for technical work and operations at Information Risk Management.

Senior Security Consultant of the IRM Consultancy team where my responsibilities include internal and external penetration testing, to scenario-based penetration testing, application security analysis and general security architecture reviews for a range of clients including UK Government departments, Law-enforcement, CNI (Critical National Infrastructure) and Financial institutions. Other related work includes:• Security Consultancy• Configuration audit• Vulnerability assessment• Application vulnerability testing• Scenario-based penetration testing• External penetration testing• Internal penetration testing• Risk Assessment• Forensic Investigation• Security Audit• Firewall rule base audit• Vulnerability research and development

Msc, Information Security

Pgd, Bcs Part Ii