Serge Baudot Email & Phone Number

Remote

Working as part of the Global Payments Security Assurance team and Information Security Officer assigned to TSYS Managed Services EMEA, a Global Payments company.We provide full end-to-end Contact Centre capability with 24/7 support including Inbound/Outbound Customer Care Call handling, Fraud Management, Collections, Disputes and Chargeback Management and Back Office correspondence processing for financial institutions and other banking service providers.We merge expert payment-industry knowledge and scope with TSYS Issuing platforms and value-added product solutions to give you an unprecedented level of service that is cost-effective. We operate from three UK locations and one European site in the Netherlands. These four sites oversee Contact Centre operations on behalf of Issuing clients in Europe. We are a fully PCI/DSS compliant business.

Iver

Responsible for defining the Information Security strategy and roadmap for DX Group and putting in place a programme of work to deliver ISO 27001 compliance• Established programme approach and scope and documented the ISO statement of applicability.• Built and validated the inventory of assets for in-scope services.• Established and agreed a list of security principles to benchmark existing controls against.• Carried out a detailed ISO27001 audit of existing controls against agreed principles.• Agreed exposure against risk appetite with the IT leadership team.• Reviewed existing projects that could be used to remediate identified gaps.• Produced a recommendation plan for remaining gaps providing subject matter expertise where appropriate.• Implemented a governance structure for Information Security Management including the definition of roles and responsibilities, governance body, ISO-compliant information security policies, IT operational and 3rd party risk registers with risk capture and treatment process, 3rd party due diligence process, IT security schedule for 3rd party contracts, Information Security checklist for Project Managers.• Completed a presentation to be delivered as part of Security Awareness sessions.• Completed a WIFI vulnerability assessment using WIFI explorer (Mac).• Completed server vulnerability assessments using Tenable Nessus 6.2.• Completed a web application vulnerability assessment using OWASP-ZAP on the corporate web site prior to go-live.• Advised IT staff and leadership team on all other aspects of ISO27001 compliance.

• Responsible for defining the Information Security strategy and roadmap for easyJet and putting in place a programme of work to deliver the vision including alignment to ISO 27001 and compliance with the PCI-DSS.• Managed a monthly Information Security Steering Group with cross-functional representation including members of the Senior Leadership Team.• Security SME for easyJet including definition of security requirements for solutions developed or acquired, review of RFP responses, review of security clauses in contracts and negotiation on security schedules with Legal and Procurement and third party providers as part of contract renewals and negotiations.• Implemented and managed a third party risk management framework.• Carried out third party vendor due diligence reviews including issuance and review of responses to a self-assessment questionnaire followed up by onsite reviews.• Authored and issued ISO27001 and PCI-DSS-aligned Information Security policies.• Developed, rolled-out and managed an Information Security awareness campaign including the production of a SCORM-compliant eLearning course on ‘Safeguarding our reputation’ deployed on a Moodle-based Learning Management System.• Accountable for Disaster Recovery and Business Continuity including regular testing of arrangements in place both in-house and with our third party suppliers.• Day-to-day support to IT and Business users on all Information Security related matters including approval of Service Desk requests falling outside of policy.• Support to Risk and Audit, Fraud Loss Investigation and Data Protection teams.• Management of security incidents.• Management of one permanent Information Security Analyst and one contractor project resource, setting objectives, conducting fortnightly 1:1 meetings to review delivery against objectives and twice-yearly performance appraisals.

• 18-month secondment as interim Information Security Manager for easyJet.• 15-month secondment to the Information Risk Management function of a multi-national credit card company implementing a Data Quality governance framework and managing the security and privacy due diligence reviews of 70+ third party service providers across the UK and Germany.• IT audit reviews in relation to IT strategy and risk management; project management; IT investment and procurement; compliance with group policies; change and incident management; third party management; network and security management; application security and user access control; service continuity and contingency planning.• Delivered system selection projects including management of the RFP process for a UK and a Switzerland-based Asset Manager.• Managed and delivered a pre-implementation project audit for a large reassurance company.• Delivered several PCI audits for a multinational credit card organisation.• Management of resources on projects (typically 2-4 people), setting project objectives and team members’ delivery expectations.• Participated in the annual review of all performance reviews (Managers and below) to discuss development areas and contenders for promotion.

18-month secondment as interim Information Security Manager for easyJet

Secondment to the Information Risk Management function of a multi-national credit card company implementing a Data Quality governance framework and managing the security and privacy due diligence reviews of 70+ third party service providers across the UK and Germany.

• Managed infrastructure refresh projects for either in-house developed or third party applications• Planned and initiated a cross-border server relocation project• Accountable for the delivery/sourcing of production infrastructure components for the Security Operations team:- Implemented a security monitoring solution using ChangeAuditor™- Implemented an Identity Management solution using P-SYNCH™- Implemented a new shared server infrastructure.

• Managed the end-to-end delivery of an 18-month desktop refresh and office relocation programme including server decommissioning and mail and data migration projects for Barclays Internal Audit. The programme encompassed technical and non-technical aspects and had high visibility within the Bank as the business as well as Audit teams worldwide used Internal Audit systems.• Managed BIA's UK-based IT team supporting the main back-end infrastructure (6 staff)• IT Security Manager in charge of ensuring compliance of operational processes with Group IT Security policies• Relationship Management with BIA's own IT and 3rd party providers of audit services

Managed several IT audits across applications, infrastructure, platforms and processes:• Application reviews: review of bespoke and off-the-shelf applications focusing on security controls, audit trails, completeness and accuracy of data inputs, processing and outputs, sensitive functions, functionality, change management, reliability, supportability and disaster recovery.• Platform reviews: UNIX, NT, IBM and UNISYS Mainframes focusing on security, operations, maintenance, support procedures and disaster recovery• Infrastructure reviews: Review of networks, WAN management, 3rd party connectivity, data centres, infrastructure components including firewalls (CP F/W-1), focusing on security configuration and management, operations, maintenance, physical security and resilience• IT Processes: Manage IT Change, System Development Lifecycle (SDLC), IT Effectiveness, Business Continuity Management, Manage eCommerce systems• Extensive use of Business Analysis, process mapping tools and techniques• Management of one junior resource (IT Auditor)

Manager in Global Risk Management Solution (GRMS) - Technology Risk Services Division• Project managed IT Security, eBusiness and operational risk management assignments for major clients in the Financial Services and Retail sectors:- Implementation of PKI and other security solutions- IT/eBusiness Risk Management framework implementation (COBIT, ISO 17799, ISF)- IT due diligence- IT security audit• Subject Matter Expert organising client and in-house training courses and presentations on eBusiness and IT security• Responsible for staff recruitment and mentoring of 3 junior members of staff

Sep. 97/ Sep. 98Business Analyst in the Fund Consulting Group. In charge of identifying opportunities for improving the efficiency and quality of service of the Bank’s internal operating units. Production of automated procedures making extensive use of VBA (Visual Basic for Applications). Intranet development and implementation using HTML, ASP and SQL. Member of the Y2K committee.Feb. 97/ Sep. 97Funds Management daily cash and stock reconciliations, trade settlements, production of monthly client reports, corporate actions processing, handling of internal and external queries.

3E Cycle, Finance, Trésorerie Et Ingénierie Financiere

Diplom Betriebswirt (Fh), Finanzwirtschaft Und Rechnungswesen

Certificat Supérieur En Gestion/Finance, Gestion/Finance

B.A. (Hons), European Finance And Accounting

Baccalauréat, A1