Marius Poskus Email & Phone Number

United Kingdom

United Kingdom

Led the development and execution of a comprehensive cybersecurity program tailored to our business. My strategic vision led to the cultivation of a resilient security posture that supported business objectivesDesigned and implemented a bespoke cybersecurity framework, enabling targeted accountability within my team. This framework was pivotal in achieving ISO27001 compliance, demonstrating our commitment to international best practicesPioneered the development of security standards for cloud adoption, facilitating a secure and seamless transition to cloud-based operations. This initiative enhanced our operational efficiency and ensured the integrity and confidentiality of sensitive financial dataLed the creation of a comprehensive application security program, integrating cutting-edge security practices into the development lifecycle. This program significantly reduced vulnerabilities and reinforced our defense against emerging cyber threatsHandpicked and nurtured a high-caliber global cybersecurity team from the ground up. Fostered a culture of continuous learning and accountability, empowering team members to excel in their areas of expertiseSuccessfully mitigated potential financial and reputational risks by proactively addressing cybersecurity challenges. My strategic approach to risk management supported business continuity and safeguarded against threats, contributing to the company's robust financial performanceExcelled in engaging with stakeholders at all levels, including board members, to advocate for cybersecurity investments and initiatives. My ability to translate complex security concepts into business terms has been instrumental in securing executive support and fostering a culture of security awarenessDrove continuous improvement in our cybersecurity posture through audits, training programs, and adherence to regulatory requirements. This commitment to excellence and compliance has positioned us as a trusted and secure fintech leader

United Kingdom

Working with the CIO, CTO, COO & Product Owners to achieve alignment between information security and business change objectives •Architect, design and provide implementation patterns of security controls throughout solution delivery lifecycle•Driving continuous improvement to the Security DevOps pipelines and processes, and to the Information Security tools, services, and processes across the Organisation•Maintain knowledge of the latest cloud security threats and implement mitigations to protect Glow and our customers•Designing and developing generic security patterns and guidelines to enable applications stay compliant - integrate them into Application and DevOps processes and CI/CD pipelines•Evaluating and on-boarding security tools such as RASP, WAF, SAST, vulnerability and open-source scanning into the Security DevOps life cycle for Azure & other Cloud stacks•Contributing features to internally developed Information Security tools, and integrate those tools into the Security DevOps pipelines•Implementation of solutions for monitoring the health of our applications and security appliances•Develop solutions to protect the Glow brand, networks, assets and products by implementing state-of-the-art detection, prevention, and response capabilities•Design, engineer, operationalise and maintain the secure systems which support continuous deployment/integration solutions •Perform high-level technical assessments of existing cloud security architectures, processes, projects and vendors; evaluate new and existing cloud security solutions in support of deployments to Azure•Support compliance initiatives by creating and delivering appropriate data-driven dashboards, reports, and other supporting artifacts.•Build automation to actively audit the infrastructure for security misconfigurations in Azure•Develop API integrations and recommend configuration changes to improve the performance, usability, and value of cloud security tools

London, England, United Kingdom

Through extensive cybersecurity executive expertise aim to provide businesses and start-ups how to align their products to cybersecurity industry needs. Helping cybersecurity startups to build their road to market strategies as well as making sure that their product aligns to CISO needs.

United Kingdom

• Design and implementation of cloud security controls embedded within a Microsoft Cloud Adoption Framework• Operational management of cloud security technologies, such as SAST, DAST, WAS, config monitoring/management • Input into our Cloud Adoption Framework and various Cloud Security Standards and Policies, ensuring they are fully maintained and up to date• Work closely with the DevOps team to improve secure coding practices• Advise on best practice processes to help bed in security to DevOps pipelines and scrum teams• Review and ensure Microsoft Azure IaaS and PaaS configurations are secure• Work closely with Infrastructure and Solutions Architecture teams to ensure cloud solutions are designed in a secure, resilient way following Secure BY Design Principles• Influence IT teams to ‘ThinkSecure ActSecure’• Work independently with key IT and business stakeholders to develop strong relationships and influence strategy

London, England Metropolitan Area

• Security Operations Centre ( SOC ) has been built with my guidance into the Cloud and maturing the SOC function across the business, created 2 year SOC maturity strategy aligned with Mitre Att&ck• Vulnerability management programme rollout across the business and increased maturity of the function• Launched Red Teaming and continuous capabilities and controls assessment to drive threat informed defence and maturity• Threat Intelligence research into threat actor behaviours at appropriate threat sophistication levels for our company to drive strategic decisions• Introduced Threat Modelling for DevOps projects lifecycle as well as all other key projects for increased security.• SOAR implementation in maturing SOC capabilities• Cloud processes automation

• Security Operations Centre (SOC) Management• Executive Briefings on Metrics and Performance and Security Functions• Responsible for Managing KPI’s, SLA’s and SLO’s of Security Activities• Threat Intelligence Management including the introduction of Surface and Dark Web Monitoring• Threat Intelligence Monitoring and Analysis of Geopolitical and Nation State activities to aid in Business Risk Analysis of digital and physical threats• Full Lifecycle of Security Project Management• SOC management and correlation of 250/300 events per day

London, United Kingdom

· Executive Briefing on Security Threat Ecosystem and status of programmes and security initiatives· Designed and Developer strategies to implement strong security practices, procedures and processes to reduce likelihood and impact of security incidents· Managed Security budget of £300k· Co-ordinated with legal, governance, risk and compliance departments to ensure Security Insurances and Data Protection regulations were being adhered to across the business· Oversaw interventions with Insider Threats and External Adversaries ensuring correct usage of procedures and chain of custody over evidence collection to enable successful prosecutions· Threat Modelling, Penetration Testing and Red Teaming of environments to identify residual risk across the estates· Responsible for the Maintenance and Uptime of all Security Detection systems including Sensors, SIEM and other security tooling/infrastructure.· Continual Insider threat monitoring and threat hunting blending audit data, asset information and behavioural analysis of threat actors to identify risks and breaches.· Implemented Auditing procedures for business processes to enable fraud detection and data/financial loss capabilities.

London, United Kingdom

· Security Operation Centre (SOC) Management· Managed SOC rotas and coverage for 24/7/365 coverage· Designed and Developed Security Strategies and Tactical Implementations· Delivered Security training to meet regulatory, Legislative and Policy requirements· Full Spectrum Security for Digital and Physical site in blended SOC (Security, Fire and Safety)· Recruitment and Interviewing of Security Analysts· Performing Annual Reviews, Performance Assessments and Line Manager activities for Security Analysts· Security incident response· Security Incident investigation· Fraud Investigation· Insider Threat and Spearphishing / Phishing Lead with Responsibility for Anti-Money Laundering / Anti-Bribery· Managed first and third party supplier relationships for outsourced SOC and MSP activities· Additional Threat Assessment Activities for large events· Security Report Writing

London, United Kingdom

· Threat modelling of High Value assets· Regular Governance Risk and Compliance Audits· Responsible for full site security· Security Incident response (SIR/IR)· Security Training for New Hires and Peers· Running Security Stand-ups and delivering daily threat intelligence briefings· Designed and implemented Fraud detection systems· Insider Threat monitoring and management· Security Investigations· Security Report Writing and Analytics· SIEM Monitoring of both digital and physical sensor networks across sites· Managed outsourced SOC activities and MSP supplier relations· Managed SOC rotas and coverage for 24/7/365 coverage· Provided Threat Assessments and Heightened Monitoring during Black Swan Events (high profile sales/VIP activity)· Cross-departmental coordination for large scale security projects and rollouts· Identity and Access Management (IDAM/IAM)

Croydon, United Kingdom

· Full Spectrum Security (analysing data from sensors, threat intelligence and HUMINT assets)· Investigations and Analysis / evidence Collection / Law Enforcement and Legal engagement· Complex Asset Management (high value assets) (large numbers of assets)· IoT Security - Sensors/Integrated Systems· Designed and delivered Security Training to other Security professionals· Designed and delivered Security Awareness Training for Staff· Data and Physical Loss Prevention of High Value Assets· Governance, Risk and Compliance Audits against various regulatory frameworks and internal policies· Insider Threat Identification and Investigations· Deployment of Security Solutions across large distributed estates

London, United Kingdom

Working as Loss Prevention Officer with the following responsibilities:• Implemented inventory control audits and investigations• Ensured proper operation of physical building security, alarms, and camera surveillance system.• Provided necessary training to new loss prevention officers• Monitored and ensured store's tagging compliance.• Collaborated with police officers, attorneys and prosecutors to ensure appropriate legal actions executed.• Worked closely with the store management team to increase sales associate awareness in safety• Provided training to all store staff in detection of shoplifters and fraudsters within the district.• Improved shrink performance within the store.• Implemented loss prevention strategies and conducted loss prevention training to reduce shrink in the retail stores.• Conducted store tour to ensure compliance with retail safety regulations.• Ensured that investigations are conducted and successfully concluded involving associate theft and violations of business conduct policy.• Daily checks of all hardware systems and if necessary engineer informed of relevant faults. • Implementing company's stop and search procedures to insure minimum risk of internal theft.

Looking after sports center and fitness suite, providing inductions to members wishing to join our gym, managing bookings for our fields and courts, providing excellent customer service to gain more clients and much more.

Cyber Security And Digital Forensics Msc, Cyber/Computer Forensics And Counterterrorism, Merit

Cyber Security Diploma (Level 5), Cyber Security

Advenced Security Management Diploma, Security

Business (Finance) And Accounting, Accounting And Finance

Bachelor Of Engineering (Beng), Mechanical Engineering

Education record

Bachelor'S Degree, Transportation And Highway Engineering