• Define and deliver an annual awareness and culture strategy to implement within the UK and align with global objectives and support other countries.• Run an effective ethical phishing and awareness campaign to measure exposure to threat intelligence led phishing emails. These campaigns include general phishing, spear phishing and social engineering.• Implement measures to track awareness, knowledge and behaviours relating to cyber security across the organisation.• Produce targeted awareness material for high risk groups, such as IT Administrations, SWIFT Payment Operators and employees new to the company.• Improve technical cyber security awareness amongst the Business Development and IT Developer community to assist with the ‘Shift Left’ objective to adopt key security practices earlier within the product lifecycle.• Identify and adopt new technologies to aid employees to adopt correct behaviours into working practices. E.g. Password Managers, Data Loss Prevention, Data Classification, Secure file sharing with third parties.• Manage an organisation wide Cyber Ambassador program to create new, exciting initiatives and help deliver content to local audiences through existing business communication channels. • Provide technical security consultancy advice for Business Units to ensure new solutions are compliant with external regulations and internal cyber policies.• Work effectively with a broad range of stakeholders, actively collaborate and influence efforts to meet the key objectives of the bank.• Establish and maintain relationships with peers across the wider financial services sector to share knowledge and best practices.

Vulnerability Management, Red Team, CBESTPolicy Governance, NIST, PCI DSSSecurity Awareness, SANS MTG 433Regulation, Compliance, Risk ManagementReporting to Senior Management and CommitteesPeople Management

My current role is to provide risk analysis, consultancy and management services to ensure risk is effectively controlled in line with company standards.The main focus is ensuring a robust relationship exists with individual business areas I am solely responsible for, to ensure risks are identified, managed and reported effectively.Key responsibilities;- Managing risks within IT, Payments & Card Services, Business Change and Compliance- Business Continuity Planning and Co-ordination strategically for the Society and advisory for local departmental plans- Committee reporting and attendance at Risk Management Committee, Operational Risk Committee, Business Continuity Committee and IT Security Committee- Investigation and analysis of risk loss events, including thematic reviews- Development and roll out of Operational Risk Frameworks and supporting processes- Coordinate & facilitate briefings, workshops etc to disseminate information on risk and control related issues- Engagements and sign off for key projects within the Society

Key responsibilities;- Building internal relationships in order to propagate effective risk management by embedding the operational risk framework and facilitating self assessment reviews of risks and controls.- Provide risk input into business projects to ensure risks are appropriately identified managed and reported- Work with Management in business areas to identify risks, understand the existing control structure in place and implement & embed risk control and reporting solutions- Measure, challenge and report on the effectiveness of the implementation of risk strategies and solutions- Ensure remedial action is taken so that strategies and solutions remain relevant and effective- Perform the data capture and analysis process to support risk identification, control improvement and reporting- Facilitate and influence the implementation of relevant and adequate controls frameworks and the correction of below-standard controls frameworks and regulatory compliance performance.

My responsibilities include;- Sarbanes Oxley evidence collection, assurance testing and certification- Certifications : IBDE, VISA, LINK, Faster Payments, BACS, CHAPS, Eurogiro, BASEL II- Audits : Internal audits departments (both business and IT), Deloitte & Touche- Engagement with audit, findings meetings, tracking and reporting of actions- Analysis of data, metrics and present findings clearly- Compliance reporting against Santander Corporate Standards- Creation, tracking, reporting of waivers- Manage Operational Risk within IT, at a high level and a local granular level- Tracking of risks for progress / changes in circumstance that would affect scoring- Reporting to Directors- Gap analysis work between standards and production environments.- Delegation of actions and ensuring teams deliver to deadlines- Communication of pending audits, requirements, scope and issues to relevant teams, senior management and Directors- Proactively manage own workload to meet regulatory deadlines.- Identify weaknesses in processes, advise and track progress of solutions.

IT Security