Matthew Lomas Email & Phone Number

Cambridge, Cambridgeshire, Gb

AstraZeneca PLC is a global science-led pharmaceutical and biotechnology company specialising in the discovery, development and commercialisation of prescription life changing medicines in Oncology and BioPharmaceuticals that are used by millions of patients worldwide. AstraZeneca employs circa 80,000 staff in 44 locations across 30 countries worldwide. AstraZeneca is listed on the London Stock Exchange and is a constituent of the FTSE 100 Index. As Director of Cyber Security Risk, I am responsible for the identification, management and reporting of cyber risk and risk reduction activities, both within Cyber and across the global Business Technology Groups and Enterprise Services, that help strengthen our cyber resilience by protecting the organisation's infrastructure, systems, applications and data assets.In my role I ensure that risk reduction initiatives are aligned and prioritised to the cyber security strategy and overarching organisational objectives and strategic direction, whilst maintaining transparent communication of KPIs and KRIs with key decision makers and stakeholders including Cyber Leadership, IT Leadership, Audit Committee, and Board of Directors.

Cambridge, Cambridgeshire, Gb

Macclesfield, Cheshire, Gb

Bodycote PLC is the global leader in heat treatment and specialist thermal processing services, providing a variety of techniques and specialist engineering processes which improve the properties of metals and alloys and extend the life of components. Bodycote operates within the automotive, energy, medical, aerospace and defence industries and employees circa 5000 staff in 180 locations across 23 countries worldwide. Bodycote is listed on the London Stock Exchange and is a constituent of the FTSE 250 Index.Key Responsibilities:- Development and maintenance of the information security management system (ISMS), ensuring a proportionate and consistent level of security is adopted for all data, applications, systems and network infrastructure across the Group;- Management of external and internal security audit frameworks, coordinating audit schedules and tracking and reporting of remediation activities;- Management of the third-party assurance framework and reporting of third-party risk to senior management;- Reporting of risk and control compliance through regular meetings with senior management and generation of presentations for the audit committee, executive committee and board of directors;- Supplier management for all security related solutions and services, from the creation of the initial RFP, through to supplier selection, engagement, and post implementation management of performance;- Management of all security testing, including external, internal and wireless network penetration testing and vulnerability scanning, including tracking and reporting of remediation activities to senior management;- Execution of logical and physical security assessments of Bodycote facilities to evaluate their current security posture and to recommend appropriate remediation activities;- Management of the user training platform and development of all information security awareness training content.

Stockport, Manchester, Gb

APS Group Secure Solutions (APS GSS) provides card personalisation (payment, loyalty and membership), transactional print, mailing, document scanning, data capture and archiving services from a high secure certified facility based in Chester. APS GSS is a MasterCard, Visa Europe and American Express approved card personalisation and PIN vendor and is a Tier1 PCI DSS certified Service Provider for its secure transactional print and inbound scanning and archive services.Key Responsibilities:- Responsible for the logical and physical security of the APS high secure facility encompassing card personalisation, PIN print, document scanning, transactional print and secure mailing operations;- Management of three separate teams and their respective service lines covering logical security, physical security (including outsourced guard monitoring service), and internal audit; - Management of external and internal audit frameworks, coordinating audit schedules and tracking and reporting of remediation activities;- Reporting of risk and control compliance through regular meetings with senior management and external stakeholders such as MBNA, Bank Of America and the Co-operative Bank;- Management of all certifications including PCI DSS, PCI Card Production, and ISO 27001:2013;- Management of the third-party assurance framework and reporting of third-party risk to senior management;- Management of all security testing and vulnerability scanning including tracking and reporting of remediation activities to senior management;- Supplier management for all security related solutions and services, from the creation of the initial RFP, through to supplier selection, engagement, and post implementation management of performance;- Development and maintenance of the information security management system (ISMS);- Management of the user training platform and development of all information security awareness training content.

Altrincham, Cheshire, Gb

Secaud was founded in September 2010 as an IT auditing and consultancy company operating within the payment card industry. Secaud achieved Approved Supplier status in 2011 with Visa Europe to perform logical security audits throughout Europe and then in 2012 with Visa International to perform logical and physical security audits within their AP & CEMEA regions. Secaud was also approved as a PCI QSA Company to perform PCI DSS assessments within Europe and achieved certification to ISO27001:2013 and Cyber Essentials PLUS. As Principal Consultant I was responsible for conducting security assessments against the latest Payment Card Industry (PCI) security standards for Payment Vendors that are either seeking to or that currently undertake the following payment card related activities:• Card and ICC manufacturing (including ICC embedding and pre-personalisation)• Card personalisation (including ICC personalisation and Magnetic-stripe encoding)• Card storing, shipping, mailing & fulfilment • PIN generation, PIN printing & distribution (including PIN electronic distribution)• Mobile/Secure Element component manufacturing, embedding and distribution• VMPA OTA provisioning and personalisation• Secure Element OTA lifecycle management• OTA transaction services (issuer updates)• Visa mobile gateway• 3-D Secure payment authentication (Enrolment Server and ACS)• Cloud-based payments

Manchester, Greater Manchester, Gb

NCC Group (as part of their Cyber Security audit function) is accredited by MasterCard, Visa, American Express and China Union Pay to perform assessments of Payment Vendors against PCI Card Production logical and physical security requirements for the following card production and related payment services: • Card Production• Over-The-Air (OTA) Personalisation• Cloud-Based Payment Platform Security• 3-D Secure • PIN Security • GSMA Security AccreditationAs a Senior Information Security Auditor I was responsible for performing logical and physical security assessments of Payment Vendors on behalf of MasterCard International and VISA Europe.Meridian Services International Limited was acquired by NCC Group in March 2010

Meridian Services International is an IT auditing and consultancy company that specialises in providing logical and physical security auditing and related advisory services to Payment Vendors globally that perform payment card manufacturing, Magnetic Stripe and EMV data preparation, card and ICC personalisation, PIN production and other payment related services of MasterCard and Visa branded payment cards on behalf of their card issuers.As a Senior Information Security Auditor I was responsible for performing logical and physical security assessments of Payment Vendors on behalf of MasterCard International and VISA Europe.

Alpha is a leading independent data management, data storage, data backup and data recovery solutions provider with 28 years experience delivering turnkey solutions to government departments, universities and schools, hospitals, local authorities, charities and companies.Alpha Business Computers was acquired by the ANS Group in November 2010.

Certificate In Professional Studies, Business Administration And Management

Msc, E-Commerce

Bsc, Business Information Systems