Paul Eynon Email & Phone Number

New York, Ny, Us

As Managing Director of Security Governance, Risk, and Compliance I oversee and support security initiatives and services relating to the Governance of information security policies, processes, procedures, standards, and guidelines, Risk management (internal and 3rd party), business continuity and disaster recovery, coordinate training materials and awareness efforts to ensure that the appropriate audit artifacts are available for the compliance teams and security related audits. I collaborate with the other security teams to ensure information risks are identified, assessed, mitigated and / or remediated accordingly, to enhance the security posture of the company. I provide management and oversight of a team toexecute on both daily functions and strategic initiatives, as necessary.

Worldwide, Oo

Leveraging my expertise in successfully constructing a highly capable and esteemed team, I extended these achievements by assuming a broader responsibility of devising and implementing initiatives aimed at mitigating crucial risks that impact my stakeholders. By enlisting and inspiring a diverse team comprising individuals from both internal and external backgrounds, I effectively constructed, guided, and oversaw these programs within a second line of defence framework.As an Assessment Leader I have several key responsibilities: Collaboration with senior leadership: working closely with senior leadership across all Deloitte geographies to address and manage matters related to the assessments. This collaboration helps ensure alignment with strategic objectives and effective risk management practices.Planning and conducting assessments: responsible for managing the lifecycle of planning and conducting second line of defence assessments in the areas of cyber, confidentiality, privacy, and technology. Proactive risk reduction and maturity improvement: fostering a culture of self-awareness regarding risks and control deficiencies. By driving proactive risk reduction initiatives to improve the maturity of the first line of defence risk management. This also contributes to accurate and insightful risk reporting.Assessment plan development: leading the development of a fit-for-purpose assessment plan for the second line of defence (2LoD). This plan leverages the work done in the first line of defence and focuses on both a residual risk view and risk management performance measurement perspective.In my role Leading Assessments, I manage and coordinate various activities related to risk assessments, testing, oversight, and reporting. My work contributes to enhancing risk management capabilities and ensuring the organization operates within its risk appetite.

Worldwide, Oo

This role gave me a unique insight into the leadership of Member Firms within Deloitte and how they interacted with the central organisation. Key leaders within the business would share their insight where I was able to consolidate feedback and lead change for global impact across the wider network. Responsible for managing the lifecycle of planning and conducting assessments related to technology, cyber, confidentiality, and privacy. My team consisted of subject matter experts (SMEs) who conducted complex compliance and assessment activities. I reported to both the technology and risk function leaders.Primary responsibility for leading technology, cyber, confidentiality, and privacy assessments for the Deloitte Member Firm Network. As the market's focus on cyber accelerated, I expanded my role to encompass new ways of working that aligned compliance activities. This allowed Member Firms to align with the Global Strategy and protect themselves while maintaining the global brand.To fulfil this role effectively, I worked with various governance groups and acted as a trusted advisor with significant standing in the organization. I influenced and negotiated practical solutions, working closely with C-suite leaders to implement and monitor remediation activities. The compliance process and assessments provided the necessary support to align people, technology, processes, and security in a practical manner. Through these assessments, I identified inconsistencies and addressed them as a single global firm, ensuring a cohesive approach to security and compliance.

Worldwide, Oo

Working with Deloitte Member Firms to improve their IT capability with a focus on IT maturity and Value. Responsible for the Global IT Regional Relationship Leadership across Deloitte member firms in all regions (EMEA; Asia Pacific; Americas).

Working with Deloitte Member Firms to improve IT Governance and advising on formation of IT strategy with a view to improving IT Maturity. Responsible for the Global IT Regional Relationship management of Deloitte member firms across all regions (EMEA; Asia Pacific; Americas).

Worldwide, Oo

I am currently working on Social Media in the Corporate Environment. I am running a number of projects to get this up and running. In the past I have run project to develop and deploy Vista to 12,000 people in the UK and Switzerland including the integration of the Swiss into the UK Domain. Implementing a Managed Output Service to closely manage our printing and copying costs. Implementing Next Generation Communications with IP Telephony and integration with Microsoft Office Communicator. Running a development project to support the launch of the Deloitte Academy and the refurbishment of suitable executive space. Preparing the IT division for the implementation of SAP for time and expense recording and management information.

Worldwide, Oo

Worldwide, Oo

Iso27032, Information Security Management

Iso27001 Lead Auditor, Information Security Management

Prince2 Practitioner, Project Managment

A-Level

Gcse