Patrick Mccarty Email & Phone Number

London, United Kingdom

Direct managed services company providing risk and information security consultancy services, with focus on IT risk management, governance, network security, and secure infrastructure design and implementation. Analyse business needs and challenges of various clients to deliver secure, best-of-breed solutions. ● Led consultancy firm that caters to IT risk management, governance, and network security, working with diverse set of clients to identify business needs and provide secure solutions. ● Specialised in secure infrastructure design and implementation, ensuring that client businesses are equipped with robust and reliable systems. ● Delivered solutions that balance control of IT risks with needs of business, ensuring aligned and effective operations. ● Demonstrated expertise in various frameworks such as ISO27001, NIST, COBIT, CESG Protecting Bulk Data, NHS, GDPR, and ITIL, leveraging best practices in security standards and regulatory requirements. ● Managed complex security and governance implementations in challenging environments, meeting business requirements while maintaining high standards of information security.

London Area, United Kingdom

Supported CISO during corporate transition, delivering actionable reports on information security. Integrated innovation with security strategy, assessed IT and cyber risks, and prioritised controls. Facilitated development of policies mapped to SCF and NIST. Guided ServiceNow IRM implementation and led enterprise-wide security exceptions process. ● Played integral role in maintenance of global risk management program and provided guidance to client's business and IT teams to strengthen cybersecurity measures. ● Successfully communicated and managed varying risk appetites and exposures as organisation evolved. ● Conducted IRM activities and strategy, risk-to-control mapping, led development of automated and manual Key Performance Indicator (KPI) indicators, and mapped those indicators. ● Led Third-Party Application Programming Interface (API) Governance initiatives as business liaison. ● Spearheaded Insider Threat initiative while also implementing business-appropriate control measures. ● Implemented security strategies, solutions, and architectural designs, coordinated, and executed programs, and led awareness, outreach, and business management initiatives. ● Led Document Control and labelling initiative, ensuring proper management and accessibility of critical or business sensitive documents.

London Area, United Kingdom

Designed processes for client consultants, mitigating information security risks during engagements. Aligned with business practices for efficient onboarding and training. Presented policy changes, balancing risk, and convenience, gaining board approval. Developed incident response plan, focusing on identifying, responding to, and recovering from significant incidents. Addressed probable incident types and identified key individuals and their roles in incident response process, streamlining response to significant information security incidents.

London, England, United Kingdom

Directed Information Security initiatives and offered counsel to Executive Board, establishing acceptable risk thresholds. Formulated and executed robust Information Security and IT risk management strategies adhering to ISO27001, PCI, and NHS standards. Orchestrated Information Security risk assessments, collaborating with IT to synchronize security processes, tools, and third-party service provider management. Oversaw Security Incident Management activities to ensure timely and effective responses and remediation. Delivered information, guidance, and training across various business areas, providing formal input to Information Security change projects.● Spearheaded and successfully executed a PCI consolidation project, optimizing efficiency by reducing PCI payment channels from 42 to 18.● Conducted routine cybersecurity risk analyses for C-level Executive Leadership Team, providing crucial insights to enhance organization's overall security posture.● Developed and implemented robust IT Governance structures, notably establishing a Technical Design Authority, contributing to streamlined decision-making processes and ensuring alignment with organizational objectives.● Delivered internal processes to ensure information security governance and compliance.

London Area, United Kingdom

Implemented range of comprehensive GDPR risk assessments and audits for several key Telstra clients, including a major transportation manufacturer and a leading pharmaceutical company in the UK. Conducted thorough audits and amendments to complex policy sets, further enhancing security measures in place for various high-profile clients. Engaged and trained stakeholders on their specific regulatory and statutory obligations aligning their business processes with their necessary requirements. Implemented business processes that included internal monitoring activities.

London, England, United Kingdom

Advised Executive Board at London Borough of Islington on Information Security, mitigating potential risks. Integrated risk management into change management process, devising a functional and control-based risk register. Successfully addressed and remediated ICO audit findings, avoiding fines. Established a central repository for uniform policies and procedures, anchored in risk analysis and ISO27001. Utilised ISO27001, COBIT, CESG Protecting Bulk Data, NHS, and ITIL best practices to create new IT governance processes within authority. ● Steered organisation towards more secure digital environment by implementing basic risk analysis concepts and embedding them into communication strategy with management, Executive Boards, and business lines. ● Simplified PCI compliance by designing high-level approach to shift over 200 existing payment channels to standardised and outsourced PCI provider. ● Enhanced technical network security on daily basis and conducted governance and risk analysis training, fostering culture of security awareness within organisation. ● Spearheaded investigation and resolution/response of security incidents, developing standardised approach to investigations/incidents. ● Ensured continuous improvement and regular audit of new and existing processes to monitor uptake and stakeholder engagement. ● Developed strategy and implemented defence in depth for council email infrastructure. Reduced Spam and Fishing email reaching organisational users inbox from 60K per day to under 100.● Interfaced with the ICO, NHS, and PSN regarding regulatory obligations and oversight required.

London, England, United Kingdom

Designed and deployed secure remote access device using open-source software for video communications division. Established best practices for remote access, enhancing both Dimension Data and client security. Implemented standards for secure password storage and communication, reducing unauthorised access risk. Streamlined operations with secure certificate store for build and backup. Initiated ISO27001 certification, setting security standards. Authored security and audit policies aligning with ISO27001, provided training to these policies fostering a culture of security awareness.

Amsterdam, North Holland, Netherlands

Managed and monitored network security infrastructure, including firewalls and network traffic aggregation tools. Played pivotal role in design and development of new Security Operations Centres (SOCs), while also revamping existing ones. Ensured secure operation of multinational banks and food service companies through client reporting. Developed and implemented comprehensive security measures, governance, and controls, protecting the SOC, itself, against potential threats.

New York City Metropolitan Area

Network Architecture Consultant, BSP Industries, NYCBusiness Analyst, MAC Cosmetics (Division of Estee Lauder), NYCNetwork Consultant, Multiple clients, NYCNetwork Consultant, Hospital Audiences, NYCSystems Analyst / Architect, Equitable Life Assurance Society (now AXA), NYC