Sam Stubbs Email and Phone Number

Security Improvement Programme

• Managing and supporting the data ingestion of remediated KYC data into the banks KYC and client screening systems.• Designing, developing and maintaining operational end-to-end MI processes for High-Risk remediation and delivering weekly, monthly and ad-hoc reports.• Ensuring the quality and integrity of the data ingested, through collaboration with quality assurance teams.• Planning and delivering data aggregation and transformation to produce MI dashboards and… Show more • Managing and supporting the data ingestion of remediated KYC data into the banks KYC and client screening systems.• Designing, developing and maintaining operational end-to-end MI processes for High-Risk remediation and delivering weekly, monthly and ad-hoc reports.• Ensuring the quality and integrity of the data ingested, through collaboration with quality assurance teams.• Planning and delivering data aggregation and transformation to produce MI dashboards and reports.• Overseeing data reconciliation between reported metrics and raw service data, ensuring data accuracy and integrity.• Identifying new service workstreams and building respective MI and dashboards using Salesforce.• Creation of User-stories and workflows for the remediated data Ingestion process. Show less

• Identifying populations for customer remediation through data analysis (SQL, Access & Excel)• Chasing Regime co-ordination• Consequence Management

• Requirements gathering on several aspects of ransomware including Vulnerability Management and Device Configuration• Scope specifications on Incident Response and Forensics and Data Loss Prevention• Cyber (Ransomware) Kanban implementation through MS Planner

• Identifying inefficiencies within existing remediation processes and defining process improvements through data analysis.• Creation of Day-to-Day Exec MI and progress reporting.• Creation of communications and agreement through governance.• Supporting and stepping in as Project Lead when required.• Involved in the co-ordination of chasing regimes

• Data Sourcing and ensure the timely and accurate collection of data/metrics from various business lines and departments. • Data Capturing and collation of coherent and accurate reports containing the captured data/metrics and up-to-date commentary.• Creation and development of future-proofed automated dashboards for a variety of senior stakeholders.• Implementation of brand-new Line 1 Financial Crime Sharepoint site.• Operate in a dynamic environment and collaborate with L2… Show more • Data Sourcing and ensure the timely and accurate collection of data/metrics from various business lines and departments. • Data Capturing and collation of coherent and accurate reports containing the captured data/metrics and up-to-date commentary.• Creation and development of future-proofed automated dashboards for a variety of senior stakeholders.• Implementation of brand-new Line 1 Financial Crime Sharepoint site.• Operate in a dynamic environment and collaborate with L2 Management team and collaboratively support all stakeholders in order to ensure successful collation of necessary data/metrics. • Ensuring that all data/metrics are collected within the outlined timeframe and format. Show less

• Undertake updates to the RBS Business Glossary including creation and maintenance of all records.• Preparation of papers to support governance processes relating to Business Terms, Key Data Elements (KDEs) and Data Ownership.• Ensure all central records relating to KDEs and data ownership are maintained in a consistent format and in line with defined standards.• Support regular QA checks on KDEs and the relationships between them.• Support project resource in creation of… Show more • Undertake updates to the RBS Business Glossary including creation and maintenance of all records.• Preparation of papers to support governance processes relating to Business Terms, Key Data Elements (KDEs) and Data Ownership.• Ensure all central records relating to KDEs and data ownership are maintained in a consistent format and in line with defined standards.• Support regular QA checks on KDEs and the relationships between them.• Support project resource in creation of definitions for new business terms and amendments to existing definitions.• Build and manage effective networks across a diverse range of businesses and functions and actively engage stakeholders across the Bank.• Support business areas in the identification of ownership for KDEs• Collate KDE and ownership metrics on a regular basis in order to report these within Chief Data Office (CDO) and senior data forums.• Undertake publication of glossary and lineage material relating to the RBS data knowledgebase in a timely manner Show less

• Engage with IT Service/Server Owners to ensure they have the correct level of security controls/permissions in place.• Provide weekly MI to Programme Manager and Client Heads.• Improve Asset Management governance and reconciliation processes.• Work closely with teams in Saudi Arabia to ensure compliance with rest of world standards.• Ensure correct levels of user access are administered throughout the JML (Joiner, Movers and Leavers) process.• Dealing with high-risk… Show more • Engage with IT Service/Server Owners to ensure they have the correct level of security controls/permissions in place.• Provide weekly MI to Programme Manager and Client Heads.• Improve Asset Management governance and reconciliation processes.• Work closely with teams in Saudi Arabia to ensure compliance with rest of world standards.• Ensure correct levels of user access are administered throughout the JML (Joiner, Movers and Leavers) process.• Dealing with high-risk security applications and elevated access rights that can only be accessed via a controlled access method and between agreed and specific time slots (Breakglass).• Stakeholder Management Show less

• Provide BA service to complete deliverables and documentation including Scope Specification and Requirements Definition documents for ‘Migrate Access Control Lists to Oracle Identity Manager’ Project.• Engage with Application Owners and Compliance Teams regarding fit for purpose User Access Rights documents for Privileged and IT Privileged access.• Ensuring the recertification of multiple platforms and databases is carried out in an agreed automated schedule.• Dealing with… Show more • Provide BA service to complete deliverables and documentation including Scope Specification and Requirements Definition documents for ‘Migrate Access Control Lists to Oracle Identity Manager’ Project.• Engage with Application Owners and Compliance Teams regarding fit for purpose User Access Rights documents for Privileged and IT Privileged access.• Ensuring the recertification of multiple platforms and databases is carried out in an agreed automated schedule.• Dealing with high-risk security applications and elevated access rights that can only be accessed via a controlled access method and between agreed and specific time slots (Breakglass).• Review existing permission levels making sure appropriate access has been sought and actioned based on user and group profiles and permissions.• Stakeholder Management Show less

* Responsible for identification, assessment, management and escalation of workstream/project risks and issues* Deliver fit for purpose workstreams/small projects for our customers by ensuring the analysis and use of customer/frontline/stakeholder insights are used throughout the project lifecycle. * Work collaboratively within the Technology and Change team to plan, organise, control and deliver worksreams or small projects. Ensure adherence to operational processes, policies and… Show more * Responsible for identification, assessment, management and escalation of workstream/project risks and issues* Deliver fit for purpose workstreams/small projects for our customers by ensuring the analysis and use of customer/frontline/stakeholder insights are used throughout the project lifecycle. * Work collaboratively within the Technology and Change team to plan, organise, control and deliver worksreams or small projects. Ensure adherence to operational processes, policies and standards. * Contribution to keeping assigned projects, within a defined budget and to time and quality * Ensure the approved framework standards and governance are used within assigned workstream/projects at all times. Take responsibility for ensuring Technology and Change is regarded as ‘easy to do business with’ by its customers, partners and staff * Build and manage an effective network across a diverse range of businesses and functions and actively engage stakeholders across Services and the Bank. * Responsible for ensuring there are no brand/reputational risks raised as a result of activity within assigned workstream/projects Show less

i-Confidential delivered a project as part of a large IT Security transformation programme for Lloyds Banking Group to improve the Banks IT Security controls globally. This looked to improve access control to production systems by Application Development Management (ADM) staff to avoid high impact service outages and breach of integrity and confidentiality rules. Due to the success of this piece of work, this was then extended to Enterprise Architecture & Design (EAD), Group IT Operations… Show more i-Confidential delivered a project as part of a large IT Security transformation programme for Lloyds Banking Group to improve the Banks IT Security controls globally. This looked to improve access control to production systems by Application Development Management (ADM) staff to avoid high impact service outages and breach of integrity and confidentiality rules. Due to the success of this piece of work, this was then extended to Enterprise Architecture & Design (EAD), Group IT Operations (GITO) and Exec staff.• Co-ordinate the automatic recertifcation of a number of Critical Business Processes (CBP) and Privileged Access Minimisation (PAM) applications.• Provide technical and analyst input to ensure all Wave 2/3 deliverables are completed in line with project plan and are delivered to the appropriate level of quality.• Engage with Business/IT/Provisioning contacts and Platform Delegates who look after our in-scope applications (c500) and requesting full provisioning details of these applications and the existing IT security processes/protocols that are in place. • Organisation of remediation steps to be carried out to ensure every user has the correct access level to a particular system i.e. Reduce to Read, Remove Account etc.• Exception production and handling.• Dealing with high-risk security applications that can only be accessed between agreed timeframes (Breakglass). Show less

• Monitoring and maintenance of a central CRM request mailbox, understanding requests and work schedules accordingly• Control of a weekly status report ensuring all work commitments are documented and scheduled• Working with IT teams to monitor data received on a weekly basis, providing reports on campaign successes to stakeholders as required• Answering campaign queries• Formatting and organisation of data for loading into the weekly process on an adhoc basis• Selection of… Show more • Monitoring and maintenance of a central CRM request mailbox, understanding requests and work schedules accordingly• Control of a weekly status report ensuring all work commitments are documented and scheduled• Working with IT teams to monitor data received on a weekly basis, providing reports on campaign successes to stakeholders as required• Answering campaign queries• Formatting and organisation of data for loading into the weekly process on an adhoc basis• Selection of data for 3rd party suppliers• Selection of data for email and postal campaigns• Facilitation of weekly prize winner selection(s) Show less

• Creation, maintenance and modification of Wholesale Banking Recoveries (WBR) MI and Commercial Packs for Glasgow, Edinburgh & Bristol.• Extraction and interrogation of raw data systems using a number of different analysis tools such as SAS, SAP, SQL, FoxPro and Microsoft Access.• Secured MI dashboard pack production and management on a weekly, monthly and quarterly basis. • Process and procedure improvement and review.• Analysis of debt recoveries and sensitive customer data… Show more • Creation, maintenance and modification of Wholesale Banking Recoveries (WBR) MI and Commercial Packs for Glasgow, Edinburgh & Bristol.• Extraction and interrogation of raw data systems using a number of different analysis tools such as SAS, SAP, SQL, FoxPro and Microsoft Access.• Secured MI dashboard pack production and management on a weekly, monthly and quarterly basis. • Process and procedure improvement and review.• Analysis of debt recoveries and sensitive customer data on all scales down to transaction level and maintenance of impairment models and write-offs all of which are included in the MI. Show less

• Translation of external raw survey data into usable reporting information used in assessing against Scottish Housing Quality Standards (SHQS) and outlining recommendations for future housing development programmes.• Creation and Maintenance of large housing stock databases.• Gap, Trend and Data Quality analysis based on housing stock conditions.

• Management and maintenance of the Unix Infrastructure environment and describe how the physical infrastructure is designed and deployed.• Network design, strategy and maintenance.• Creation and management of software counters in Peregrine AssetCenter to calculate software licensing compliance and advise on licensing position. This includes sourcing information from various third-party vendors and departments out with UI.• Extensive revamp of MI pack including advanced automation… Show more • Management and maintenance of the Unix Infrastructure environment and describe how the physical infrastructure is designed and deployed.• Network design, strategy and maintenance.• Creation and management of software counters in Peregrine AssetCenter to calculate software licensing compliance and advise on licensing position. This includes sourcing information from various third-party vendors and departments out with UI.• Extensive revamp of MI pack including advanced automation functionality and graphical representation.• Commitment and ingenuity in export application of available facilities to non-standard situations.• Diagnosing underlying causes of difficulties, and devising solutions or workarounds to ensure that the effect on service in minimised. • Maintain full inventory of the Unix Infrastructure environments, complying with all audit and Sarbanes Oxley controls. Show less

• Asset Management – Manage the distribution of IT assets and maintain asset data on central database.• Knowledge Management – Support dissemination of knowledge assets and resources to optimise value.• Risk Management – Assist the Asset Manager to monitor and control risk and issue processes.• Data Migration – Ensure data taken over from legacy platforms is correctly set out and mappings are in place.• Content Management – The control and maintenance of Asset data using a set… Show more • Asset Management – Manage the distribution of IT assets and maintain asset data on central database.• Knowledge Management – Support dissemination of knowledge assets and resources to optimise value.• Risk Management – Assist the Asset Manager to monitor and control risk and issue processes.• Data Migration – Ensure data taken over from legacy platforms is correctly set out and mappings are in place.• Content Management – The control and maintenance of Asset data using a set of processes and technologies that aid the support of the acquiring, editing, managing and distribution of this information (content) in which ever form the customer requires. This can relate to the Asset life cycle or any other data flow process; from creation, review, storage and decommissioning.• Planning – Assist Project teams in the preparation and maintenance of Project/Programme delivery plans.• Process Documentation – Detailed documented processes and procedures all of tasks and jobs undertaken within team. .• Data Quality/Integrity – Ensure all data is of a high standard, 100% accuracy for reporting and presentation purposes. • Assist with innovation and key improvements to business processes/procedures• Software Asset Management – Creation and maintenance of software counters and reconciliation wizards enabling close-net software compliance between software licenses and installations.• Supplier Management – Assist in the management of the relationship with vendors and suppliers.• Test Co-Ordinating – Creation and maintenance of test plans, schedules environments and scripts for large scale data migration projects. Show less