Patrick Mccloskey Email & Phone Number

London, United Kingdom

Singapore

Responsible for providing information security, risk and governance consultancy services to FTSE 100 and Fortune 500 clients across a wide range of subject areas and industries. Transformation projects include risk management, strategy and governance, capability and maturity analysis, information assurance, ISO 27001, MAS TRM, ITIL, NIST, COBIT, cyber security reviews, supplier assurance, business continuity and security metrics and reporting. Industries include Banking and Finance, Retail, Technology and Social Media.

London, United Kingdom

Responsible for leading the Information Security strategy for the merger of Paddy Power and Betfair to initiate a new security function for the largest online gaming operator in the world. The 14th month project included the development of frameworks, processes, documentation, culture, the new service catalogue, organisational structure and security technologies for the merged organisation, whilst also identifying and managing the risks associated with the merger itself. The role was a key part of Technology Leadership Team, reporting to Director of Security and leading the team of Security Business Partners (8 people). Key achievements: - Successfully led the pre- and post-merger integration activities of Betfair and Paddy Power including Security tooling, services, strategy, structure, risks and projects.- Led the adoption of Agile working and tooling across Security, leading to significant efficiency and agility improvements.- Established engagement, workload and project management framework including committees, tracking, tooling, prioritisation and alignment with the rest of the business.- Built the framework, processes and maturity model for Security Engagement – including establishing the Security Business Partner role.

London

Establish and run the enterprise-wide information security risk management programme by instituting on-going risk identification, assessment, analysis, evaluation, treatment, tracking and reporting.Key responsibilities:- Embedding information security risk management across the organisation globally- Leading the assessment, management and treatment of key information security risks- Communicating risk management requirements and standards up to executive level through training, documentation, committees and publications- Running the Security and Technology Risk Committees, preparing and delivering reports for the Corporate Risk Committee and Audit Committee- Facilitating regular risk identification workshops with the Delivery and Leadership teamsKey achievements:- Built and implemented internally and externally recognised framework for security and technology risk management. Outstanding feedback received by auditors & externally within the industry.- Achieved substantial risk management automation via implementation of custom designed risk solution (Service-Now)- Design and integration of new risk rating methodology to adopt reporting and risk aggregation by annualised loss expectancy, resulting in a step change in reporting capabilities- Implementation and adoption of new risk taxonomy based on relevant frameworks (e.g. Risk IT, ISO 27005), allowing comprehensive identification and analysis of risks- Developed and delivered on a strategic roadmap for information security risk management improvement based on current and desired maturity levels against relevant frameworks (e.g. FISSM, Risk IT)

London, United Kingdom

Key responsibilities:- Leading the assessment, management and treatment of key risks- Delivering an enterprise wide information security risk awareness programme- Managing, maintaining and improving the information security risk register- Delivering reports on the company’s information security risk statusKey achievements:- Established and automated the collection of KRIs, improving the company’s reaction to real-time data- Led the risk discussions with external auditors (e.g. ISO 27001, PCI DSS, ISMS, KPMG)- Initiated and integrated processes and polices, risk committees, a risk evaluation structure (cost-benefit analysis), training up to C-level and mature reporting capabilities- Conducted comprehensive risk assessments and proposed treatment options for key risks- Transformed the existing change management process by designing and implementing an automated, revenue-based risk assessment tool, having a visibly positive effect on the bottom line.

Master’S Degree, Mathematics, Mmath

Core Modules: Continuous Optimisation, Numerical Methods, Graphical Models, Perturbation Methods, PDEs, Financial, Derivatives.

High School

- A-Levels Economics (A), Mathematics (A), Further Mathematics (A) - AS-Levels Advanced Further Mathematics (A), Philosophy (A), - FSMQ.