Steve Darrall Email & Phone Number

Melbourne, Victoria, Au

Melbourne, Victoria, Au

Melbourne, Victoria, Au

Melbourne, Victoria, Au

Melbourne, Victoria, Au

Sydney, Nsw, Au

• Streamline business processes and develop levels of delivery staff professionalism• Project manage all Securus Global engagements for 3 of the “big 4” banks• Act as interface between technical team and business-focused clients in delivery of reports and negotiation around findings and required remediation• Program manage all consulting activities across both technical and non-technical consulting engagements• Quality assure client deliverables. Resulted in marked improvement immediately after joining Securus Global• Perform assessment of all new employee candidates as part of interview panel and provide final go or no-go recommendation• Manage and mentor team of 10 consultants to ensure professional development and staff satisfaction. Led to marked reduction in staff turnover• Perform assessments against and consultancy in support of client’s PCI DSS and PA DSS programs. Advice in these areas regularly resulted in greatly reduced scope of applicable standard• Provide ongoing strategic guidance to a well-known Australian organisation following an information security incident leading to marked and measurable improvements in their information security posture• Deliver training to clients (secure development and security awareness) in support of information security programs.• Perform business development and account management activities to clients across a range of industries. Resulted in closed business in excess of $1m during first 12 months with 25% increase in year 2• Provide guidance for sales and marketing efforts across both offices to ensure that staff with BD responsibilities fulfilled them according to company growth plans• Negotiate clients’ business requirements against available budget to ensure that appropriate level of security assurance was achieved from all projects

Richmond, Victoria, Au

It's Movember and the time for change is now! As a part of Generation Mo, I've committed my face to the cause and will be growing a moustache for the entire month of November to raise funds and awareness for men's health.I've personally seen how much help donations to Movember provide to those living with and beyond prostate cancer. Every dollar counts and makes a huge difference! I’d like you to support me as I fight the good fight. I'm restless for change and would love you to support my passion with a donation. You can donate to my moustache by: 1. Donating online at: http://mobro.co/stevedarrall 2. Writing a cheque to 'Movember', referencing my registration ID: 8173409 and mailing it to: Movember Foundation PO Box 60 East Melbourne VIC 8002 Australia Your donation will support world class men's health programs that combat prostate and testicular cancer and mental health challenges.These programs, directed by the Movember Foundation, are focused on:- awareness and education- staying mentally healthy- living with and beyond cancer- living with and beyond mental illness- research All working to achieve our vision of an everlasting impact on the face of men's health. These funded programs are spread across Australia, please visit the Funded Programs page for all the hairy details: http://au.movember.com/programs Thanks in advance for supporting my Mo and helping to change the face of men's health. United we Mo!

Global, All, Oo

• Consistently recognised for high performance both (billable activities, client management and contributions to internal processes and procedures)• Product manage PCI DSS Service line resulting in revenue growth from $90,000 to $400,000 in 12 months• Customised and deployed new project management methodology within CQR Consulting leading to greatly reduced project management overheads, simplification of project management tasks and more accurate forecasting of engagement effort• Seconded to large energy generator/retailer for 6 months (Information Security Manager) requiring interaction with many areas of the business, development of relationships and raising the profile of Information Security within the organisation as well as performing oversight of PCI DSS remediation efforts• Often brought into projects to either assist colleagues in recovering from project issues or to resolve issues with client satisfaction• Hands on delivery for many PCI DSS and PA DSS Assessments across a range of different sized organisations at multiple levels of business and information security maturity. These assessments were both informal assisted self-assessments and formal reviews• Presented at industry fora to raise awareness of PCI DSS in key vertical markets• Lead a number of clients ranging from small organisations through to large blue chip companies from little awareness of PCI DSS requirements through to full compliance• Perform reviews against client provided standards and requirements• Review policy suites against varying client requirements including ISO27001, PCI DSS, SA Government ISMF and recommend/implement remedial activities• Perform forensic analyses on behalf of multiple clients to establish the source and cause of IT security incidents

• Network and application penetration testing for clients across a range of industries - Finance, Air Transport, Hospitality, Gaming (Online and Physical). Passed CHECK Team Leader on first attempt• Provide Disaster Recovery and Crisis Management Consultancy.• Mentor, lead and supervise junior team members (5 direct reports). Included personal development, performance management and developing an effective bonus scheme for consultants• Successfully setup new branch office in Hyderabad, India - sourcing technical staff and then training and mentoring the new employees• Ensured smooth setup of the office itself after being provided with working space. This involved liaising with various government and commercial organisations in India• Review MPLS based networks at both CE and provider core for the UK’s largest MPLS IP-VPN provider to Critical National Infrastructure (CNI) organisations• Presented at conferences to both technical and management audiences. Conferences have included Government (GCHQ/CESG), Trade Show (INFOSEC) and UK Information Security Community groups• Provide security consultancy services to UK Critical National Infrastructure (CNI)• Project manage large penetration tests (100+ man days)• Develop training material for client delivery. Training courses developed and delivered included ethical hacking, application testing and secure web application development. After course development, I was required to run ‘train the trainer’ session for IRM’s senior consultants to ensure that they were able to deliver course materials to the expected standards• Product owner for a tool that was initially designed to make firewall ruleset design and analysis easier for consultants. After the tool itself was written I was then a key member of the team tasked with selling the product and resulting services (firewall migration and implementation analysis) to a number of key accounts.

New York, Ny, Us

• Penetration testing (network and application) for clients across Finance, Telecommunications and Pharmaceutical industries• Lead and supervise team members on engagements covering the range of services offered by KPMG UK’s Technology Advisory group• Perform internal IT audits in relation to IT security controls and practices (Sarbanes Oxley) under supervision of senior colleagues• Perform system configuration reviews of a wide range of client-server, database, mid-range and mainframe software according to industry or general best practices• Deliver 1-2 day workshops covering penetration testing, application security testing and defence against attacks to clients and MSc programme students• Provide technical support to financial audit teams where required in order to ensure efficacy of statements made by financial audit clients• Perform audits against ISO17799 framework for a number of suppliers to a large aerospace manufacturer in order that supplier security issues did not affect deliveries of a key product• Provide IT controls audit to clients both seconded to internal audit teams and as part of an external audit team• Work with clients to raise profile of internal security groups by presenting various scenarios to developers, project managers and other client senior managers

Armonk, New York, Ny, Us

• Pen testing (network and application) across UK, Europe, Middle East and somehow in Bermuda• Application, network, risk and architecture assessments • Primary technical contact for a number of key clients, ensuring repeat business • Provided security advice to clients outside of assessments in order that clients see ISS as trusted security advisors • Worked with colleagues and partners worldwide to plan and perform assessments ensuring client expectations are well managed• Acted as technical lead for network monitoring team at multinational trade conference in the Middle-East and during elections for a large European country• Provided technical leadership and project management on a large (4 month) on-site assessment for a major Middle Eastern TelCo• Provide advice and guidance on raising security awareness particularly among developers and infrastructure managers