Self-employed security consultant providing cyber security and IT risk management services to various high- street Banks including Lloyds, Clydesdale Yorkshire Banking Group (CYBG), and Sainsbury’s Bank.Duties vary depending on individual client requirements and have included technical security reviews, identifying and implementing IT risk and security process improvements, project oversight and security strategy and investment planning. Highlights include:• Producing a three-year security investment programme for CYBG then worked with their change team to initiate the associated projects. This included defining scope, collecting and specifying requirements, costsCURRICULUM VITAEand resources needed to deliver a programme covering anti-malware, application security, intrusiondetection, network access control and vulnerability management.• Completing technical reviews for Lloyds, CYBG and Sainsbury’s Bank to identify gaps in their IT security and recommending improvements required to close the gaps.• Reviewing and updating technical security standards for CYBG covering IBM RACF and AS/400 operating systems, HP Open VMS and IBM MQ messaging middleware.• Defining security requirements for IT transformation projects within Sainsbury’s Bank and representing the Information Security team on the associated Architecture Board. Projects included a migration to Office 365, and Windows 7 across the desktop estate, an SSL-VPN upgrade and mobile device re-platforming.• Designing and implementing information security controls as part of Lloyds’ control rationalisation and improvement programme. Improvements included automation and strengthening user access controls (on Tandem, Unisys IX/NX, RACF, ACF2, and Windows operating systems).

Self-employed RPAS Pilot and Mission Planner working on the Airbus Zephyr high-altitude solar-powered RPAS programme, highlights include:• Acting as either RPAS Pilot or Mission Planner flying the unmanned aircraft during the Engineering Flight Test campaign. Obtained over 80 hours multi-crew flight time working alongside Flight Test Engineers, Design Engineers and Meteorological support staff. • Acting as Remote Pilot in Command (RPIC) with overall responsibility for all command decisions to ensure safe and successful flight during the mission segment and responsible for the safety of on-duty flight crew, the aircraft and the Ground Control Station.• Operating in a Multi-crew environment following standard operating procedures, using checklists and giving in-flight briefings.• Received extensive training on the aircraft, its systems, and weather forecasting and analysis.• Becoming a trained Radiosonde Operator able to assemble and launch Radiosonde weather balloons.Other duties involved using existing programming skills to design and development various software applications used by project Engineers and Flight Crew including:• Python/ArcGIS solution to calculate and visualise air traffic densities derived from ADSB data as part of the safety case requested by an overseas Regulator to allow operation in their airspace.• Various Python and ArcGIS solutions to process and visualise weather forecast and reanalysis data to support climate studies of operating sites.• Python/Flask/Docker web application to display radiosonde and GFS forecast wind data for flight planning purposes.• Java application to display live telemetry in the GCS for use by Design Engineers during sensor calibration.

Developing and delivering global Data Loss Prevention (DLP) programme focusing on web, email, backup tape and removable media channels. Specifically: • Identifying IS control and policy compliance gaps.• High-level solution design and development of associated functional and non-functional requirements.• Business case production and oversight of the resulting control improvement projects. • Documenting current and future state security architectures and development of the associated investment plans.• Developing information security strategy roadmaps for DLP and Secure Messaging focusing on the implementation of controls to protect data at rest, in motion and in use.

• Planning and delivery of a portfolio of technology infrastructure audits focusing on security and availability. • Developing quarterly audit and resource plans to support an accurate and robust audit opinion.• Line management of four technology audit team members.• Liaise with RBS Technology and Risk functions' Senior and Middle management.• Supporting colleagues in USA and Europe to deliver globally consistent, high-quality audits.

• Fieldwork and reporting of individual IT infrastructure audits. • Line manager of a graduate trainee.• Audit issue tracking.• Developed automated tests for Oracle database environments, WebSphere MQ and mainframe resources protected by RACF.

• Designing, developing and implementing of a number of enhancements to BSkyB’s debt management systems including additional functionality to facilitate the management of debt collection agencies and the automatic reprocessing of failed data transfers to BSkyB’s Chordiant CRM application• Supporting BSkyB’s Aspect Unison outbound call placement application including understanding the technical architecture of the system and documenting the associated support procedures.

• Managed and delivered IT infrastructure security assessments using ethical hacking techniques including the internal and external scanning of client infrastructure to identify potential and actual security vulnerabilities.• Management of SOx IT audit activity for an FTSE100 utility company with responsibility for audit planning, scope determination, resource scheduling, budgeting and management of six staff.• Technical lead on the audit, advising on the audit approach to ensure consistency throughout the engagement.• Planned and managed IT audit work to support Deloitte’s internal and external audit services – included liaising with external audit teams and the client to determine audit scope, resource scheduling, management and budgeting.• Seconded to the internal audit function of a global oil and gas company with responsibility for the field-management and delivery of SOx IT audits in Malaysia, Singapore, Borneo and the Philippines.

Joined EDS as a graduate software engineer where I gained exposure to the full software development lifecycle. Wass part of a team developing a J2EE web service used by numerous Department of Work and Pensions (DWP) modernisation projects. Duties included:• Performance and load testing of a J2EE web service which involved liaising with the customer to determine the required operating volumes, designing the test strategy, configuring the test environment and developing and executing the test scripts using Mercury Loadrunner. Also responsible for producing and presenting the test results to EDS management and the DWP Technology Office• Functional testing of various DWP modernisation systems including updates to the Minimum Income Guarantee call-centre application, the Retirement Pension Tele-claims call-centre application and the New Tax Credit enquiry application.• Requirements gathering, analysis, design and coding of an interface linking a J2EE web service legacy mainframe services. The application used Java and a 3rd party OSLAN transport provider to communicate with ICL mainframe transaction services. Documented Use Cases and the resulting system architecture using UML. Helped develop a mainframe recorder which enabled the off-line testing of the system and minimised disruption for other users of the mainframe services.• Creating software quality processes based on the Rational Unified Process (RUP) and was involved in the mapping of RUP to EDS’s internal software development system.• Helping deploy an EDS quality improvement project aimed at attaining Capability Maturity Model Level 3 accreditation for the Newcastle Solution Centre. This involved liaising with individual projects and promoting CMM and its’ associated quality practices, appraising project processes and documentation, advising on improvements and conducting CMM-based interviews.

Working in the group headquarters as a System Support Technician in the IT department, duties included:• Managing an EDI project to link BSW with various customers using the Tradacom messaging protocol andthe GEIS Value Added Network. After a successful pilot with BSW’s largest customer the system was rolledout to other customers capable of trading electronically.• Migrating a distributed payroll application onto Windows NT Terminal Server environment. The originalsystem was becoming increasingly slow due to an increase in WAN traffic. Moving over to the Terminal Server platform significantly reduced the volume of WAN traffic and resulted in a 600% performance increase in the system.• Developing XML based EDI standards for the Scottish timber industry –part of an initiative between BWS Timber and Forest Enterprise to enable the electronic transfer of timber consignment data using Internet technologies.

Worked for Sykes’ European fulfilment operation, joined the IT department as an Intern during my final year at University then worked full-time starting in June 1998 as a Systems Analyst reporting into the Global IT Manager for fulfilment operations. Highlights include:• Designing and developing a barcode data capture system for the Autodesk Developer Network. This used a combination of Java technologies including RMI, JDBC and Servlets querying an Oracle 7 database.• Managing the implementation of a pan-European RF Scanning system developed specifically to support Microsoft’s European distribution operation. The system was based on Monarch/Symbol hardware and Magic RAD software (linking into an Oracle 7 database).• Designing and implementing a Swedish shipping database using MS Access and Oracle to streamline the distribution of customers’ goods throughout the Nordic region. In order to further streamline the system I liaised directly with DHL in order to provide a data-feed directly into their waybill printing and shipping manifest software.• Designing and implementing Sykes local intranet, developing server-side web applications using Java and the Apache web-server on a Microsoft Windows NT server platform.Promoted to Interface/Integration Analyst based in Sykes’ Edinburgh office. Highlights of this role include:• Delivering a system to link Sykes’ ERP application (MFG/Pro) to a clients ERP application (SAP). This project involved using the ANSI X12 EDI messaging protocol, the GEIS Value Added Network and UNIX scripting (HP-UX 10.20)• Working with Sykes’ business development division to provide an IT perspective on new business proposals. This involved researching clients’ requirements and detailed the various solutions available specifically referencing the cost, resource and lead-time of each solution. Involved in proposals for outsourcing direct mail fulfilment for Barclays Bank and providing barcode data capture solutions for Autodesk and Motorola.