Leon Joubert Email & Phone Number

Cape Town, Western Cape, South Africa

• Network Segmentation - Zoning and 3 tier Application Design according to NIST requirements• Defense in Depth principles - Implementation of technical design of RCS infrastructure • DDoS (Kona) solution - Manage and implement for public application facing internet services• Web Application Firewall (WAF) - Manage and implement for public application facing internet services• Web Application Firewall (WAF) redundancy• Cisco ISE upgrade from v2.3 to v3.1 Manage• NIST requirements/objectives implementation • Strong encryption - Manage disabling of SSL & TLS 1.0 and 1.1• Vulnerability Management• Privileged Access – Reviews keeping with least privilege access principles

Cape Town, Western Cape, South Africa

IT Security Consultant – H. Tarleys & Company June 2021 – August 2021Project - Assisted with POPIA compliance • IT Information Asset Register - Create and implement (Hardware & Software)• IT Risk Register - Create and implement (CIS Framework)• Data access policies and procedures - Create and implement • Backup Policy and strategy - Create and implement• IT Policy - Create and implement • Incident Response Policy & Plan - Create and implement Weylandts - IT Managed ServicesAugust 2017 – August 2020• Server and network infrastructure management• Relocate DC from Dimension Data DC to Teraco DC• WAN redesign – Metacom networkPure Design Interiors - IT Managed ServicesNovember 2018 – December 2020• Server and network infrastructure management• Office 365 Migration

Cape Town, Western Cape, South Africa

Information Security Officer• Hardware & Software Assets - Define and document company assets (Data, Personnel, Devices, Systems that enable organization to achieve business goals)• Risk register - Define and document all asset• Firewall rule management and remediating assessments• Vulnerability Management• IT Policy - Design and document • Policies and procedures - Enforcement • Adhere to Data/Information policies POPI• Change Control procedures - Design and document • IT Network Security hardware standards - Design, document and deploy according to best practice and BNP Paribas requirements• End Point security standards - Design and implement• IT security audit management • DR/BCP Officer, • BCP strategy and business impact - Testing and Alignment done annually. Results documented, communicated and improvements madeHead Of IT• Strategic decision making on infrastructure technology, in line with acceptable business downtime / recovery time objectives• Management of IT infrastructure 24/7/365• SLA reporting to board• Manage trading system hosted (Cloud) at IRESS• IT budget - Creation and Management of • SLA Management• Network infrastructure design and management (LAN / WAN / MPLS & QOS)• Service delivery to group and BNP Paribas Global• Project management• End user support management Key ProjectsManaging IT Security Infrastructure Network Segmentation Project. Setup of new IT platform for all business requirements• Data Centre Design• IT Infrastructure design - Dual layer firewalling with segmented network with separate DMZ’s for 3tier Application design- Presentation, Application and Database server• MPLS network – Design and management • Microsoft Best practices applied to all newly installed servers • Firewalls configured with Layer 7 security protocols• PBX on own separate network (VLAN) with firewall configured with gateway• Active directory design • POPIA - Managing data cleanup and protection (POPI)

Cape Town, Western Cape, South Africa

• Liaise with International client• Liaise with business on escalated support and infrastructure issues and manage it to full resolution• Manage vendors and contractors which include weekly and monthly meetings• Facilitate weekly IT meetings with team of 6 members over two sites• Manage procurement processes:• Recruitment: Communicate with employment agencies, setup of job specifications and interviews• Infrastructure support• Strategic decision making on infrastructure technology, in line with acceptable business downtime / recovery time objectives

Higher National Diploma, Information Technology

Offensive Security Certified Professional