Simon Evans Email & Phone Number

Scotland

Global

• Group Information Security Manager providing strategic framework direction and implementation for global businesses operating over 3 continents with 45,000 employees.• Significant Board and senior executive level stakeholder engagement.• Development and deployment of information security framework from scratch.• Successful certification to ISO27001, Cyber Essentials, Cyber Essential Plus schemes and NCSC CISP enrolment.• Development of mandatory bespoke security and awareness training for all staff and suppliers.• Devised an information security risk management structure to streamline risk identification, analysis and mitigation controls incorporating follow the sun SIEM solutions.• Main point of contact for initiation of network and application pen tests. • Carried out industry best practise benchmarking exercises to ensure best in class delivery.• Implemented incident reporting mechanism to identify weakness and drive down incidents year on year.• Evaluation of supply chain control infrastructure and process to ensure data security and integrity.

Uk

• Provision of strategic level fraud management, information, personnel, physical and cyber security direction for Senior Management Team acting as the company subject matter expert.• Security and Fraud Manager responsible for devising and continuously developing company policy, incorporating MOD requirements, to all direct and indirect employed staff.• Design and delivery of robust training packages covering Security, Fraud, Bribery, Corruption, Business Continuity and Information Assurance.• Design, implementation and exercising of a formalised Business Continuity Plan covering 82 establishments to ISO22301 standard.• Identified and lead investigations into security, fraud or information assurance incidents maintaining close working relationships with multiple external agencies.• Provision of subject matter expert bid documents for fraud, security, bribery, corruption and information assurance elements for 5 successful MOD contract submissions.• Contract lead for the implementation of drug and alcohol testing policy yielding positive results.

Manchester, United Kingdom

• Cyber security technologies and baseline controls manager. • Development and implementation of cyber control measures across the banking group.• Compliance assessment of controls providing security gaps analysis.• Introduced vulnerabilities into the Risk Assessment framework for analysis.