Lee Quinton Email & Phone Number

United Kingdom

United Kingdom

vCISO; senior consultant delivering SME guidance to fortune 100 companies across a range of regulatory requirements and governance frameworks, including: NIST CSF, 800-53, PCI-DSS, ISO:27001/2, CMMC, 171/172. Experienced designing, delivering, and supporting vulnerability assessment / management programs, and delivering penetration testing services.

United Kingdom

Accomplished Principal Security Expert, Consultant, and Director offering more than 17 years of experience elevating information assurance and risk management performance. Equipped with an impressive history of success securing enterprise networks for companies ranging from Fortune 100s to small businesses with a focus on online payment processing platforms. Skilled SME that blends hands-on technical assessment expertise with advanced business acumen to identify and target areas in need of improvements, changes, and new systems implementation. Delivers state-of- the-art information security, implementing advanced certifications and building talented workforces to ensure compliance with top security standards on a global level (including USA, Australia, and Europe).

United Kingdom

vCISO; senior consultant delivering SME guidance to fortune 100 companies across a range of regulatory requirements and governance frameworks, including: NIST CSF, 800-53, PCI-DSS, ISO:27001/2, CMMC, 171/172. Experienced designing, delivering, and supporting vulnerability assessment / management programs, and delivering penetration testing services.

United Kingdom

Operated as the UK Business & Compliance for Equifax UK, and the ISO for the TDX debt collection arm of company. Responsible for the team managing ISO27001, PCI-DSS, and Cyber Essentials+ certification for both companies. Responsible for third-party (vendor) risk management and acting as the primary point of contact for security interactions with Cabinet office, and subsequently all major government departments consuming TDX services.

United Kingdom

I am currently overseeing the PCI QA department, with the task of preserving the high standards of NuArx’s PCI deliverables. The QA program exists for the express purposes of ensuring that all PCI-DSS related deliverables (Gap Analysis, Pre-Assessment, and Report on Compliance) are reviewed in-line with the PCI Security Standards Council's Assessor Quality Management program requirements, ensuring that a high quality of work is maintained throughout the PCI consulting practice's products.Deliverable reports and practice documentation are reviewed explicitly to preserve a high degree of accuracy, and to provide validation of all supporting evidence. This ensures that the quality of deliverables is maintained consistently prior to publishing and distribution to merchants, merchant acquirers, service providers, and the major payment card brands (VISA, MasterCard, AMEX, Discover, and JCB).I also operate as a UK and EU senior services resource and can provide strategic sales support as necessary for all things Information Assurance related. Additionally, I support other service functions and conduct penetration testing, vulnerability assessment and management, and PCI ASV services as required.

Uk

Accuvant and FishNet Security merged at the beginning of August 2015 to become Optiv Security, Inc. My current role continues within the new organizational structure. Operated as a PCI QSA for 12 years, including the original Visa QDSP designation for 2 years prior to the PCI SSC being created. I have been a PA-QSA for the past 7 years, and was also a Visa QIRA / MasterCard QFI for 3 years. I have been responsible for conducting and the final technical review and attestations on all ASV vulnerability scan reports for the past 4 years. I am currently in charge of Optiv Security's PCI QA department, with the responsibility of maintaining the high standards of Optiv's PCI deliverables. The QA program exists for the express purposes of ensuring that all PCI-DSS Gap Analysis, Pre-Assessment and Report on Compliance deliverables are reviewed in accordance with the PCI Security Standards Council's Assessor Quality Management program requirements, and that a high degree of quality is maintained across the PCI consulting practice's work products. Additionally, the review methodologies encompasses all PA-DSS Report on Validation reviews and approvals, as well as conducting ASV vulnerability assessments and attestations.Deliverable documentation is reviewed specifically to maintain a high degree of accuracy, and to provide validation of all supporting evidence. Thus ensuring deliverable quality is consistently produced prior to publishing the reports and submitting them to major payment card entities, such as merchants, merchant acquirers, service providers and the card brands (VISA, MasterCard, AMEX, Discover, and JCB). I also operate as a UK & EU senior services resource and can also provide strategic sales support where necessary for all things Information Assurance related. Additionally, I conduct penetration testing, incident response, and forensic acquisition and analysis when required. Especially when time-frames necessitate rapid deployment.

London, United Kingdom

Operated as a PCI QSA for the past 9 years, including the original Visa QDSP designation for 2 years prior to the PCI SSC being created. I have been a PA-QSA for the past 5 years, and was also a Visa QIRA / MasterCard QFI for 3 years. I have been responsible for the final technical review and attestations on all ASV vulnerability scan reports for the past 2 years. I am currently in charge of FishNet's PCI QA department, with the purview of maintaining the high standards of FishNet Security PCI Deliverables. The QA program is for the express purposes of conducting PCI-DSS Gap Analysis, Pre-Assessment and all RoC deliverable reviews; in addition to PA-DSS RoV reviews and sign-offs, as well as conducting ASV vulnerability assessments and attestations.Deliverable documentation is reviewed specifically to ensure that accuracy and the validation of all supporting evidence is maintained to the highest degree, prior to publishing reports to the recieving payment card entities (merchants, merchant acquirers, service providers and the card brands). I also continue to operate as a UK & EU senior PCI services resource, with additional strategic sales support duties, for all things Information Assurance related. Additionally, I have some IR and forensic functions, when rapid deployment is of the essence.

Tasked with proactively managing and growing the PCI consulting team and practice, and effectively continuing to build 7Safe's PCI business into a market leader throughout the UK and European markets.Accountable for increasing revenue streams through direct client interactions, pre-sales activities, IP development.Responsible for PCI based business development / sales training processes.

Having operated as a PCI QSA for the past 5 years (including original Visa QDSP designation), a PA-QSA for the past 3 years, and a Visa QIRA (Now QFI) for the past 2 years, I am currently tasked with continuing to operate and grow an effective PCI Quality Assurance Program. The program is for the express purposes of conducting PCI-DSS RoC, PA-DSS RoV, and QFI report reviews. Deliverable documentation is reviewed specifically to ensure that accuracy and supporting evidence validation is maintained at the highest standard, prior to publishing reports to payment card entities (card brands, clients, and merchant acquirers).I also continue to operate as a UK & EU senior services resource for the purposes of PCI / IR / Forensic assessment activities.

Tasked with assisting the Director of the Incident Management practice with:• Incident Response/Digital Forensic engagement methodology• Incident Response/Digital Forensic engagement scoping• Proactively responding to out of hour’s engagement scoping, to support the sales cycle• Acting on behalf of the Director during absencePredominantly undertake incident response and digital forensic engagements within the corporate theater. Mainly conducting investigations to support QIRA/QFI incidents (on behalf of the payment card brands), where PCI impacted cardholder data has, or may have been stolen. Duties involve: • Rapid response and system image acquisition • Preservation of evidence and chain of custody conducted to FRCP requirements• Preliminary onsite investigations and issue containment• Forensic analysis, case reporting, and remediation guidance

Continuing to conduct PCI assessments, and undertaking more forensic type roles within the payment card infrastructure, for corporate entities.Now UK based.

• Tasked with proactively leading the compliance consulting team and a national base of 40 QSAs.• Accountable for increasing revenue streams through direct client interaction through pre-sales activities, IP development.• Responsible for compliance based business development / sales training processes.• Tasked with growing the compliance solution set and offering development methodologies for client initiatives encompassing: • GLBA • HIPAA • ISO 27001/27002 • PCI-DSS • PA-DSS • PCI ASV Services • SOX

Strategic and tactical security for global fortune 500 companies, with responsibilities that include consulting in the following areas; • National PCI Compliance Practice Lead (Team of 18 QSA)• PCI Compliance Onsite Audits for Merchants and Service Providers• External & Internal Network Penetration Testing (To PCI ASV standards) • Application Vulnerability Testing • Wireless Network Vulnerability and Penetration Testing • Risk Assessment and Management• Incident Response• Security Policy and Procedures• Blue Coat Instructor

Responsible for the security of the internal LANs and WAN perimeter devices of a medium sized Medical Transcription company. Duties also involved maintaining HIPAA compliancy of all company server / network infrastructure.

Responsible for the Security of the internal UK networks and EMEA Corporate Firewall infrastructure. Duties involved, managing the EMEA firewall teams, overseeing Internal vulnerability assessment of server infrastructure (UNIX & Windows), Incident response (Corporate and Customer), oversight of all external customer penetration testing, and offsite audits of corporate networks across the globe.

Responsible for the day to day security and operational requirements for a small London based ISP. Duties involved the management of the RADIUS servers, patch management, AV solutions, hardening the Linux & Windows infrastructures and acting as a junior for the management of core, edge and backbone routers & switches.

Master Of Physics, Physical Sciences

Bachelor Of Science (Bs) In Information Technology, Information Assurance And Security Specialization

Software Development Classes

Math Major, Comp Science

GPA 4.0 maintained.