I have worked in the financial services sector for over 36 years, with the last 25 years being on the IT side. I have enjoyed a varied career gaining a lot of skills and experience that have helped me grow an excellent IT Security knowledge, allowing me to draw on experience such as live support for websites, as a Firewall Engineer securing networks and data or a Solution Architect designing systems that will be robust and secure.Moving into the Barclaycard IT security team brought all the skills together and on the job training within the team helped me to grow my knowledge. A couple of SANS courses and exams, the Security Essentials, GSEC and study for CISSP, GISP helped continue my skillset and knowledge. I passed the CISSP exam and was accredited in June 2019.The Security Consultant role was very varied and included working with project teams to assess new implementations or changes to existing applications using a variety of technologies from Mainframes, Unix/Linux, Windows, a variety of database technologies and Cloud hosted environments, either Software and a Service (SaaS) or Platform as a Service (PaaS). Along with the project work I was reviewing any Firewall changes and ensuring that the existing systems were all assessed / pen tested as per the requirements from the policies and standards in Barclays. My role in Governance Risk and Control put the skills gained as a security consultant to good use during the speedy implementation of an Amazon Connect Cloud hosted telephony environment, ensuring that risks in the design and build were adequately captured to ensure the risk posture was understood and could be articulated to any non technical senior leaders. Ongoing remediation for the new environment constantly altered the risk position as does new functionality. Key skills include Vulnerability Management, identification, assessment and remediation. Cyber / Data Security Analytical Skills Problem Solving Data Protection (GDPR) Payments processing (PCI DSS) Third party assessments Identity and Access Management Cryptography Cloud hosted environments I enjoy learning new information and technology, some courses and exams:• Passed the CISSP exam in January 2019 and accredited in June 2019;• SANS MG414 study for CISSP, passed the GIAC GISP exam (May 2017);• SANS 401 Security Essentials, passed the GIAC GSEC exam (2015);• TOGAF part 1 and 2 (2013);• Variety of checkpoint Firewall courses between 2008 and 2011• Bluecoat Certified Proxy Administrator and Professional (2008);
Listed skills include Checkpoint, Bluecoat, Dns, Unix, and 45 others.