Peter Hammond Email & Phone Number

London, Gb

London, Gb

London, Gb

London, London, Gb

Developed and gained Executive Committee approval for an Information Security Strategy to enhance governance of and modernise information security across the company.Devised a new information security policy structure that improved clarity of messaging to different target audiences, which was positively recognised by parent group auditors.Introduced a new, lean information security risk management model to enable support for new projects and supplier onboarding to be delivered by a single role holder. Supported large, ambitious, fast-paced projects through focused engagement with stakeholders and suppliers, proportionate risk assessments and pragmatic security controls.Assisted small, but key, suppliers with close support regarding improving their approach to development security and information security governance.

London, Gb

Initially, solely responsible for compliance with regulatory requirements and security standards as part of a security team of six – including supplier security, internal policies, and awareness. As team grew and expanded to over twenty, primary responsibility was data protection lead within the company in a fast-moving, programme-led environment.Successfully monitored, maintained and improved compliance with ISO 27001, GDPR, DPA 2018, Smart Energy Code and Smart Meter Communication Licence.Responsible for internal policies, guidance, security alerts and induction modules, authoring content that was commended by stakeholders and senior managers.Successfully presented the case to replace the risk management process and supporting system with a simpler process, the results receiving highly positive feedback from ISO 27001 auditor and managers.Completely redesigned the supplier security assessment process and templates to meet a major increase in demand, implementing with procurement processes and legal team templates.Expanded security compliance team, recruiting well-regarded members of staff with a variety of skills and knowledge to meet the needs of the organisation.

London , Gb

Recruited and managed new team with three reports within a newly created cyber security function responsible for all cyber security policies, awareness and contract clauses across TfL.Restructured and simplified policies so that staff could easily locate those relevant to their role, and changed the language of statements to be more direct and helpful to target audiences.Designed cyber security communications programme to improve culture by building on security concepts over time – raising awareness of threats and risks, then focusing on solutions and policy.Provided security content for HR Acceptable Use Policy refresh, obtaining support for changes from trade union representatives and other stakeholders across the organisation. Led the initiative to standardise security clauses in contracts, aligning to standards while maintaining flexibility to be used for suppliers ranging from large multinationals to small businesses.

London, Gb

Member of three person team responsible for information and cyber security governance and risk management across a dynamic multi-national legal firm with over 6,000 workers.Delivered a well-received comprehensive review of ISO27001 compliance across the firm, identifying areas for improvement and change to comply with new 2013 standard. Proposed solutions including the simplification of policy structure and language to improve user understanding and compliance.Responsible for risk management of mobility solutions (bring your own device) – designed risk assessment methodology, policy and communications to ensure consistency of security across multiple solutions and improved risk identification, management and reporting.Redesigned the third party data custodian risk assessment process – authored procedure and recording template that enhance risk management and significantly improve completion rates and third party communications without impacting delivery of business critical services.Managed the annual cyber security awareness campaign, defining messages and redesigning cyber security intranet site so it acts a year-round resource for staff. Additionally, authored cyber security content for lawyers’ annual training package.Robustly represents the Firm’s user-focused and agile security management to clients, particularly in the financial and insurance sectors.

London, England, Gb

Responsible for ensuring that contracting companies have appropriate information, IT, physical and personnel security to protect company information, applying ISO27001 principles to meet regulatory security standards, while balancing with contract delivery requirements and costs.Assess and risk-manage contractors’ security controls – proposing solutions and providing on-going support where security improvements are required. Negotiate with regulators and other parties an approach when standard controls cannot be applied, for example overseas contracts.Modelled contracts security function as an integrated system, presented to internal customers as services they can request - conforming to security standards while minimising business overhead, resulting in significant improvement to compliance rates and security assurance. Created supporting training packages and delivered to internal and external key stakeholders. Author security clauses that are included in company commercial contracts, ensuring on-going compliance with legislative and regulatory changes, incorporating lessons from negotiations, and overseeing the document management process. Represented the company effectively in negotiations of these clauses within multi-billion pound contracts.Engage with government regulators and colleagues across the industry to share experience and best practice, while promoting improvement and a more dynamic approach that is beneficial to the business.Designed, implemented and maintain an Access database to manage the contracts security function – recording contract progress, automating simple tasks and data transfer, and providing management information to assure the company and regulators of the security of company contracts.

London, Gb

Implemented a successful information security stakeholder engagement, policy drafting and communications process. This resulted in a more customer-focussed system with stronger governance, risk and compliance management.Responsible for all information security training, education and awareness within the department. Designed and coordinated the delivery of an information security induction to all new members of staff, receiving highly-rated feedback from participants and resulting in improved practices. During time in role the number of incidents and simple enquiries to the security helpdesk fell significantly.Successfully introduced and supervised an information security helpdesk function - line managing and mentoring new staff members, and utilising trends to inform policies and communications. Robustly represented departmental views at Government policy committees and working groups.

London, Gb

Supplied information security advice and solutions to enquiries from staff, identifying trends and authoring guidance and website content to assist customers.Successfully managed the response to several critical information security incidents within external partners and suppliers, receiving commendation from senior managers.Presented induction training to hundreds of new staff members over the course of the role.Personally delivered bespoke security training to senior staff and members of the judiciary.

London, Gb

Seconded from the MOD to NISCC.Resolved information security incidents reported by government departments and critical national infrastructure partners, including widespread virus infections, which resulted in systems being returned to normal operations faster and with less expenditure.Provided critical alerts and vulnerability advisories in response to risks identified by suppliers, anti-virus companies and other CERTs. Managed relationships with these private sector organisations.Departmental representative for a joint-working project with local government bodies and suppliers.Active participant at CERT conferences and working groups across Europe.

London, England, Gb

Contractor working for ITSafe campaign website (which later became part of Get Safe Online) - raised awareness of computer security risks for the public and alert them to vulnerabilities and threats.Responsible for managing website look and feel, which maximised browser compatibility and ease of use for non-technical and unconfident computer users. Authored most of the website content and technical glossary, which was awarded the Plain English Campaign’s Crystal Mark.

London, Gb

Designed and implemented an incident reporting and analysis database for the security incident response team, which was used for many years.Provided technical support for bespoke operations network and applications.

Bsc First Class Honours, Computer Science

Education record

Education record