Sendip C. Email & Phone Number

London, England, Gb

Royal Tunbridge Wells, England, United Kingdom

• Hold accountability for the installation of McAfee Agent on all devices, whilst ensuring devices are communicating back with McAfee ePolicy Orchestrator• Promote operational efficiency by directing the installation of McAfee ENS on all devices, as well as On-Demand and On Access polices are set according to the function of the device• Continuous monitoring of the device to mitigate any disruption to functionality• Oversee and assess all polices, work collaboratively with teams to… Show more • Hold accountability for the installation of McAfee Agent on all devices, whilst ensuring devices are communicating back with McAfee ePolicy Orchestrator• Promote operational efficiency by directing the installation of McAfee ENS on all devices, as well as On-Demand and On Access polices are set according to the function of the device• Continuous monitoring of the device to mitigate any disruption to functionality• Oversee and assess all polices, work collaboratively with teams to collate and access requirements for exclusions to reduce impact• Utilise technical skills to assess Malware alerts and ensure notifications are received and investigated• Significantly reduce security risks by updating all McAfee applications with Hotfixes and new versions• Tasked with the installation of DLP on devices, create and embed a variety of policies to prevent data from being removed by removable storage devices (USB), the cloud, email, instant messaging, web, printing, clipboard, screen capture, file- sharing applications• Ensure all laptops are encrypted and polices are cascaded to all users to protect data on the endpoint• Use Zscaler to route all traffic through its software to apply corporate and security policies, develop polices to protect the business and users from malicious websites, as well as block malicious and URL• Monitor network traffic by utilising Darktrace. Checking, undertake investigations and resolving any alerts highlights by Darktrace, including ransomware, email phishing, and threats to cloud environments and critical infrastructure• Perform investigations on alerts activated by Rapid, extract data to gain insights on historical timeline of an incident• Investigate emails spam phishing, prevent any further incidents by blocking domains and emails address • Exhibit skills in Coalfire to undertake PCI scans, whilst ensuring URLs are passing ASV scans, and escalating any issues to relevant team in order to get servers patched and updated Show less

Royal Tunbridge Wells

• Performed research on security enhancements, translated findings to put forward recommendations to management• Kept up to date on information technology and security trends and industry best standards, utilised findings to develop company-wide best practices for IT security, documented security breaches and assessed damage caused• Undertake investigations on security breaches and other cyber security incidents, monitored computer networks for security issues• Maintained McAfee… Show more • Performed research on security enhancements, translated findings to put forward recommendations to management• Kept up to date on information technology and security trends and industry best standards, utilised findings to develop company-wide best practices for IT security, documented security breaches and assessed damage caused• Undertake investigations on security breaches and other cyber security incidents, monitored computer networks for security issues• Maintained McAfee environment and deploying to endpoints; and continuously updating with the latest signatures, patches and hotfixes• Designed policies on Endpoint Protection, Data Loss Prevention, File and Removal Media and Drive Encryption by establishing standards and procedures, measured results against industry standards and made necessary adjustments in order to secure the environment and mitigate risk• Held accountability for all PCI Compliance across various areas of the business; such as retail and insurance, ensuring the business is adequately scoped for CDEKey Achievements:• Played a key role in the successful completion of various data security projects as part of the IT Security Risk and Compliance Team, served as liaison between all project stakeholders, effectively coordinating communication processes in and out of the project team, as well as introducing, implementing and streamlining work processes, enabling data security projects to be delivered on-time, whilst driving the deliverables of IT workstreams• Reduced data security risks across the Markerstudy Group’s varied businesses, by assisting the Strategic Security Manager in roll out and promotion of the Data Classification Policy, identified and implemented data discovery toolsets, which supported the businesses in the enforcement of Data Retention Policy• Worked closely with the Big Data Team to identify the security risk of the organisation’s big data environments, as well as promoting data anonymisation and data risk reduction Show less

London, Greater London, United Kingdom

• Planned, implemented, managed, monitored and upgraded security measures for the protection of the organisations data, systems and networks, troubleshot security and network problems, responded to all system and network security breaches, ensured that the organisation's data and infrastructure was protected by enabling the appropriate security controls, participated in the change management process, tested and identified network and system vulnerabilities• Owned and managed the… Show more • Planned, implemented, managed, monitored and upgraded security measures for the protection of the organisations data, systems and networks, troubleshot security and network problems, responded to all system and network security breaches, ensured that the organisation's data and infrastructure was protected by enabling the appropriate security controls, participated in the change management process, tested and identified network and system vulnerabilities• Owned and managed the vulnerability management function for hardware (virtual and bare bones) in Data Centre and AWS, carried out monitoring and reporting activities to identify and triage security incidents• Acted as member of the CSIRT dealing with security incidents, functioned as first point of contact for all matters related to Information Security, maintained security administration processes and perform daily checks to ensure foundation controls were running and effectiveKey Achievements:• Strengthened security across the organisation, by developing strong relations with key organisational stakeholders, which facilitated the implementation of improvements to the organisation’s information security awareness program, security policies, and the delivery of security deliverables Show less

Bromley, United Kingdom

• Supported the PCI program and the PCI Team to facilitate an annual PCI DSS risk assessment and ongoing monitoring activities to ensure that results, risks, and issues were properly documented, issues were escalated and addressed, and that results were used as input back into the program for ongoing improvement, worked with key IT service providers to ensure they fulfil obligations and maintained required standards to ensure Direct Line Group’s (DLG) ongoing PCI DSS compliance• Worked with… Show more • Supported the PCI program and the PCI Team to facilitate an annual PCI DSS risk assessment and ongoing monitoring activities to ensure that results, risks, and issues were properly documented, issues were escalated and addressed, and that results were used as input back into the program for ongoing improvement, worked with key IT service providers to ensure they fulfil obligations and maintained required standards to ensure Direct Line Group’s (DLG) ongoing PCI DSS compliance• Worked with third party service providers and internal stakeholders to clarify PCI DSS requirements, shared knowledge to build PCI DSS awareness and compliance across all functions involved in PCI DSS control operation, supported third party service provider’s due diligence to embed PCI DSS control requirements in new contracts and service agreements• Ensured records and reports relating to PCI DSS compliance were kept up to date and delivered to key PCI DSS governance stakeholders, scheduled and tracked PCI activities, escalated issues and delays, mapped data flows and processes in scope of PCI compliance Show less

London, United Kingdom

• Maintain Visa Europe’s operational processes for managing the response to data compromises• Execute Visa Europe’s operational processes in response to any Data Compromise in our region • Analyse Visa Europe’s data to generate credible attack scenarios and common points of purchase fused with all available intelligence in order to detect and/or confirm a data breach has occurred and its extent.• Disseminate alerts and warnings of compromises to relevant members, and the account… Show more • Maintain Visa Europe’s operational processes for managing the response to data compromises• Execute Visa Europe’s operational processes in response to any Data Compromise in our region • Analyse Visa Europe’s data to generate credible attack scenarios and common points of purchase fused with all available intelligence in order to detect and/or confirm a data breach has occurred and its extent.• Disseminate alerts and warnings of compromises to relevant members, and the account data recovered from such incidents to the appropriate issuers.• Coordinate Visa Europe’s response to any data compromise and the development of analytical techniques with MCW , VI and other schemes as appropriate.• Generate recommendations, assessments and metrics arising from data compromises within VE region. Show less

• System Admin for applications built in-house as well as 3rd party products (Playtech, Orbis, Cyberboss, OnGame), including maintaining and monitoring application permissions structure and providing assistance and support• Create new starter profiles and terminate leaver’s profiles and modify excising profiles when required. Ensure security screening has been conducted for employees whom require access to high risk functionality prior to authorizing access. Monitor access to high risk… Show more • System Admin for applications built in-house as well as 3rd party products (Playtech, Orbis, Cyberboss, OnGame), including maintaining and monitoring application permissions structure and providing assistance and support• Create new starter profiles and terminate leaver’s profiles and modify excising profiles when required. Ensure security screening has been conducted for employees whom require access to high risk functionality prior to authorizing access. Monitor access to high risk functionality on a daily basis by the means of alerts and reports.• Run, analyze and present the results of internal security reports on a regular basis• Introduce new reports to facilitate the detection of suspicious internal activity.• Conduct a quarterly audit of all applications permissions profiles and access, highlighting any abnormalities and corrections. • Monitor activity of staff accounts and ensure it is in line with company policy and working with the compliance team. Maintain and identify a record of staff accounts with company tools and applications.• Identify any breaches or activity of concern and investigate as appropiate• Investigate and present the findings of internal security investigations.• Produce and maintain existing process documents (SOP)• Establish key working relationships with other areas of the business as well as 3rd party • Report and highlight any bugs or identified risk within applications using the JIRA system and recommend a solution.• Understanding of a Betting Exchange and concepts of betting i.e. Arbitrage betting and Hedging Show less

• Run daily reports, check alerts, monitor transactions and investigate fraudulent activity• Investigate chargeback’s and reconciliations• Refine and introduce new fraud prevention processes and techniques• Knowledge of different online payment methods (PayPal and Moneybookers)• Knowledge of promotions and prevention of promotions manipulation• Understanding of Social Responsibility procedures (GamCare)• Verifying and validate KYC documents. Develop fraud screening… Show more • Run daily reports, check alerts, monitor transactions and investigate fraudulent activity• Investigate chargeback’s and reconciliations• Refine and introduce new fraud prevention processes and techniques• Knowledge of different online payment methods (PayPal and Moneybookers)• Knowledge of promotions and prevention of promotions manipulation• Understanding of Social Responsibility procedures (GamCare)• Verifying and validate KYC documents. Develop fraud screening tools• Provide and liaise with customer service teams to handle communication with account holders• Report, monitor and investigate trends of collusions and money laundering and highlight these to Money Laundering reporting officer (MLRO) via Suspicious Activity Report (SAR) for further investigation, within Money Laundering regulations• Knowledge of products and services offered Poker Arcade Exchange Games Betting Exchange Casino Multiples• Identify any trends of market manipulation and highlighting these to Integrity team for further analysis.• Understand the variety of products offered (Poker, Arcade, Casino, Exchange Games, Betting Exchange and Multiples) Show less