Stephen Mcleod Email & Phone Number

Bolton, England, United Kingdom

• Worked on Skipton Building Society’s Security Improvement Programme including:
• Creating the Information Security Project Engagement Process and AutomatedRisk Assessment Tool.
• Aggregation of current recorded risks to see if several smaller risks could pose alarger risk.
• Consulted on major projects including an increased use of Microsoft Azure and Office 365.

• Information Security Consultant (contract)
• Information Risk Consultant on various projects including major flagship new mortgageplatform.
• Upgraded and virtualised the Guardium Data Access Monitoring Platform
• Worked the new risk assessment procedure

Manchester, United Kingdom

• Provided risk assessments to projects
• Performed Supplier assurance activities
• Developed the companies Risk Strategy

Manchester, United Kingdom

• Responsible for the management of information security at the Club
• Developed and delivered the Cyber Security Strategy within the Club and be the main point ofcontact for any IT Security related issues.
• Created and implemented the IT Risk Management Process
• Review the Clubs security status and make proposals to the Board for an improvementprogramme
• Defined and implemented the Supplier Assurance Process to limit the risk of new suppliers
• Created and published IT Security Policies

• Performed a review of the database security monitoring system and implementedimprovements
• Delivered a project to roll out data loss prevention to endpoint clients
• Consulted on the Groups PCI DSS programme
• Developed the Governance Risk and Compliance tool to assist in maintaining andmonitoring PCI DSS compliance
• Worked on developing and implementing an email encryption solution
• Provided project consultancy across a wide range of projects

Manchester

• Provided Information Security Strategy and Architecture consultancy across a diverse range of businesses including food stores, pharmacy branches, online electrical store, funeral homes and legal services.
• Set up a dedicated project consultancy team providing ISO 27005 risk assessment to projects. Implemented the financial chargeback system to support it.
• Redesigned the Supplier Risk Management process utilising a part outsourced model
• Developed the Governance, Risk and Compliance Framework for PCI to allow for better tracking of PCI Compliance Status.
• Developed the strategy to achieve PCI compliance across the whole Group and act as a subject matter expert on PCI DSS.
• Overseen a major transformation programme to ensure that no security weaknesses were introduced.

Manchester

• Assisted the Head of IS Governance set up the Trading Group specific information security function
• Provided Security Consultancy to the Co-operative Trading Group
• Dealt with security incidents and investigation.
• Implemented laptop encryption across the entire laptop estate vastly under estimated budget.
• Created Information Security Policies and Standards

Manchester

• Working within the Information Security function in Co-operative Financial Services
• Provide answers to the business son how to follow security policy
• Provided Information Security monitoring
• Provided audit liaison
• Provided support in taking down Phishing sites targeting the Co-operative Bank and Smile

Manchester

• Specialised in the design, implementation and support of security solutions such as web and email filtering, endpoint security etc.
• Assisted with security investigations
• Design and implemented solutions based on Windows servers
• Provided support of the Groups Windows server estate

• Provided second line support to employees desktops, laptops and applications.