Information Security Specialist | Cyber Security
Listed company - diverse financial services through subsidiaries spanning commercial banking, building society, mortgage finance, insurance, securities tradingSoftware developer, promoted to senior software developer and again to information security specialist.■ Team Management• Managed, led, nurtured a team of 3 analysts• 360 management – deployment of tasks, follow up, status reports, training & development• Led the team in vulnerability assessment and penetration testing exercises, identified vulnerabilities, put controls in place, mitigated risk before occurrence■ Security Operations• Investigated cyber security incidents caused by malicious activities, identified false positives• Documented security events, created a baseline of activity for the company network• Security incident and event management across the whole org• Investigated alerts created by IDS/IPS inc malicious file uploads, compromised services, SQL injections, port scanning• Reviewed security certification, mobile application issues, software vulnerability, followed up with relevant departments to ensure resolution• Investigated incidents, graded and prioritised solutions• Applied certification within the environment, ensured software was not affected, worked closely with suppliers/vendors to find solutions/upgrades for reoccurring issues■ Achievements• Volunteered to support the dev team on an internal virtual assistant resulting in greatly improved customer service and efficiencies when responding to customer queries• Co-created document tracking and watermarking solutions which assisted in the development and deployment of the solution, resulting in reduction of sensitive corporate documents leaked online• Developed custom asset management software which assisted the org in the accounting of the org assets• Lead implementer of maintenance and secure system development acquisition policies• Supported with the implementation of network access control for the whole org