Tom King Email & Phone Number

United Kingdom

Coventry, Gb

Part of the CIDO leadership team, I lead a team of security professionals and have overall responsibility for cyber security at CBS, the UK’s second biggest Building Society.

Banbury, Oxfordshire, Gb

Within the IT leadership team, I lead the team which delivers our global cyber security capabilities.• Provided cyber vision, expertise and strategic direction. I spearheaded an initiative across all of Bibby (including BFS, Bibby Distribution, CostCutter etc.) to deliver: - a simple cyber strategy (aligned to legal & regulatory requirements, and risk appetite.) - a suitable minimum standard of security, based on Cyber Essentials, with Board reporting• Drove up security awareness by incorporating live hacking demos into a successful roadshow.• Accountable Exec for multiple cyber improvement projects – network access control, mobile device management, multi-factor authentication, NG firewalls, secure corporate wireless etc.• Ensured that new IT and business projects delivered suitable assurance - via my team, direction given at project steering boards, and through suitable policies, standards and risk treatment plans. Examples: BFS’ move to the cloud, new web portals, a new HR solution, GDPR program, Office 365.• Brokered an approach for covering security within BFS’ development (DevOps) communities.• Delivered a three year security roadmap to business stakeholders, including the Board.• Outside work, continued to write and present, e.g on the Best Advice site (bit.ly/BATomKing), presenting at Midlands Security Alliance (bit.ly/2JkzRaj) and at Gartner (bit.ly/GFGartner)• Created framework to ensure 3rd party security (via a questionnaire, and a 27001-based audit).• Directed the approach to IT controls to meet internal and external audit expectations.

Banbury, Oxfordshire, Gb

A ‘greenfield’ opportunity; I created, shaped and led the information security team.• Established and chaired the company’s Information Security Steering Group, a group of senior leaders including the CEO and COO, charged with directing security across the business.• Delivered regular security reports, management information, risk summaries and live security demonstrations to the BFS Global Board, Executive Committees, and Risk Committees.• Created and launched BFS’ first global policy – covering security and acceptable use.• Delivered an information security e-learning course for all users, to drive up awareness• Brokered agreement on how IT security policies and standards were ratified and governed, and delivered a set of core IT-level policies and standards (firewalls, anti-malware, Windows 7 etc.) • Built a pragmatic, risk-based method to ensure IT projects deliver the right level of security.• Hands-on handling of a variety of security incidents such as identification, containment and cleanup of malware which was not detected by antivirus, and frequent attempted frauds.• Established FCA-aligned security framework for a new business line, dealing in FX.• Provided direction and costs around PCI compliance for a project dealing with credit card data.

York, Gb

Delivered suitable levels of security across Trinity, in particular for the managed service clients.• Established and ran security and continuity frameworks at Trinity’s managed service clients, across many sectors (predominantly financial services).• Built a new team covering security and governance; ensured clear visibility of team priorities• Created pragmatic, readable, risk-focussed security & business continuity policies.• Drove up security awareness in the business, though a “rules of the game” campaign.• SME on steering team for ISO 27001 project with specific focus around scope of ISMS, and policies.• Ensured projects treated security risks, meeting client risk appetite and regulatory aspects.

One of three senior IT directors at 3i, a FTSE financial services firm, reporting directly to the CIO. A member of the senior IT management team, I played a key role in shaping and governing IT throughout the company. The management team was responsible for IT strategy development, risk, security and continuity, projects, IT operations, applications and business/ IT governance.I led a team of in house and outsourced resources/ services, spread across two sites. Core responsibilities, across 3i globally were:• Information and IT security, business continuity/ disaster recovery and physical security.• Delivery and development of 3i’s line-of-business applications, including all financial, collaboration and investment systems. Systems were a mix of packages, bespoke apps and SaaS.Liaising closely with the business to ensure appropriate levels of security and well-targeted, high value systems, I managed a significant budget.

As the head of IT security and continuity for 3i, my focus was to ensure that IT and the 3i business adopted a sensible approach to information security. I led a small team and managed a budget of circa £XXXK. The role was a mixture of consultancy, project management, policy and standard development, risk management and hands-on security.

Role was split between IT security and project management, where I became the lead security expert at 3i.

Managed all IT within an engineering firm. Built an innovative intranet which linked to the MRP system.

Worked on two EC-funded R&D projects focused on reusing information. Designed and delivered a very successful solution for building Marine tenders; the system was in live use for over 10 years.