Nick Richmond Email & Phone Number

Oversaw the implementation of security requirements and led solution design in absence of solution architects, across a very large programme of works.- Strategic partner integration designs; both core solution and security components utililsing primarily ETL, web services and batch platforms. Solution allowed partners to almost completely descope their compliance requirements leading to significant savings and reduced onboarding times.Identification of solutions to reduce delivery effort and improve customer experience.- Design of cloud based agile driven hosting environment (AWS) outside of corporate network to enable greater flexibility.- Payment compliance (PCI) minimisation solutions to increase flexibility and reduce costs.- Oversight of agile based projects to ensure ongoing delivery against requirements and quick resolution of issues- Architect working group participation for solution buy-in- Performance issues and outage technical leadership- Project initiation and management of delivery plans- Risk management

Led solution architecture for the fraud based business unit in Internet Banking. Solutions were exposed to >1m customers and therefore had high visibility. Key activities:- Solution design and integrations for one of the most visible and critical bank applications (Internet Banking). Solutions focused around high performance, secure web services and data driven decisioning.- Business requirements initiation and shaping.- Rapid prototyping (proof of concept) to validate solution technical capabilities and provide assurance before further investment.- Stakeholder engagement particularly during incidents to provide regular updates and assurances that all issues were being managed effectively.- Leadership of domain architects, solution architects and SMEs. Driving solutions through governance.- Development of scripts to consolidate complex statistics for inclusion in MIS reports.- Design and delivery of vulnerability analysis solutions and integration into the software development lifecycle (SDLC).- Vendor evaluation and management.- Network traffic analysis to rapidly identify potential root causes.- Identification and management of legal (DPA) and risk issues

Technical manager to drive the implementation of a number of projects focused at remediation of a large number of internal audit issues.- Technical project manager to build strategic Internet facing DMZ infrastructure.- Project initiation and stakeholder buy in.- Advice and consultation to stakeholders on current security issues.- Creation of architecture framework and methodology for use as a consulting deliverable.

Provide design and support to a large number of projects, focused around the intergration of Lloyds and HBoS.- Security lead on integration projects.- Creation of architecture processes to build consistency across integration programme.- Oversight of security reviews on integration projects.- Federated single sign on solution architecture for online portals.

Provided temporary backfill for architecture leadership and oversight of all security impacting projects.- Project management and delivery of IDS/IPS feasibility project for executive committee. Project had especially tight deadlines, technical constraints and outsourcing hurdles.- Creation of enterprise security zoning model.- Team management of 4 information security managers.- Advisement and presentation CxO pressing issues.- Architecture review of outsourcers new, strategic networks and platforms and storage.- Lead architect for PCI compliance activities such as wireless segregation, IDS and call centre recording.

Responsible for strategy and key technologies, whilst leading design for high value security projects. - Enterprise firewall strategy (and successful proof of concept) delivered a 5 year roadmap for use of firewalls within the bank. Strategy also outlined how an end-to-end virtualization architecture and business service could be made possible and the benefits associated.- Technical lead for troubleshooting security based components for system/network outages (critical).- Significant contributions made largely through analysis of network sniffers/packet captures and suggestion of solutions based on that analysis.- Creation of Enterprise Security Architecture Framework. Framework more closely aligned the department to business requirements; reduced costs, and time to market while improving availability. - Strategy and implementation for the optimisation and consolidation of banks B2B extranets and other security infrastructures. Consolidation not only provided significant costs savings, but also provided a funding platform for creation of new strategic infrastructure.- Outsourcing contract revisions. Outsourcing contract was updated half way through its 10 year lifespan, to remove contentious gaps. Gaps were addressed through a remedial programme with suppliers managing each separate stream.- Risk assessments for high profile projects. These projects often had executive sponsorship, and therefore required an equally high degree of quality and carefulness for deliverables.- Online banking authentication framework. Framework provided direction to the business on the risks of Internet banking authentication strategies and the direction it should take.- Management of remediation of enterprise vulnerability scans.- End-to-end solution designs.- Security product review and approvals.- Delivery of ‘Special Request’ Projects for Group Executives/CxO.- Chair for security working group.