Steve Rumbold Email & Phone Number

London Area, United Kingdom

Provision of security risk management advice and services, including integrated operational security solutions fusing protective security, cyber security for critical assets, counter-insider and supply chain assurance programs, in addition to bespoke specialist support and assessments.

• Leadership of UK and US-based team, providing security risk insights to support business unit operations and group-level oversight.• Delivery of cyber risk assessment and analysis services to electricity and gas system operators, electricity and gas transmission, electricity interconnectors, generation assets, and LNG storage facilities, ensuring regulatory compliance and maintenance of IT and Operational Technology risks within risk appetite.• Provision of expert advice for… Show more • Leadership of UK and US-based team, providing security risk insights to support business unit operations and group-level oversight.• Delivery of cyber risk assessment and analysis services to electricity and gas system operators, electricity and gas transmission, electricity interconnectors, generation assets, and LNG storage facilities, ensuring regulatory compliance and maintenance of IT and Operational Technology risks within risk appetite.• Provision of expert advice for regulatory interactions and to Ofgem for evolution of UK regulatory landscape.• Introduced repeatable way to translate large volume of cyber risk data into simple but accurate insights for board level consumption using PowerBI and AI, using Attack Path Analysis and NIST CSF. Show less

• Introduced a multi-layered Cyber Risk Framework, including systemic risk analysis.• Simplified and clarified cyber risk assessment processes to enable data-driven insights.• Extensive understanding of NIST CSF, NIS Regulations and associated compliance requirements.

Bristol, United Kingdom

• Set up first independent security assurance branch in EDF, increasing UK Government confidence.• Lead for programme of assurance activities, focussing on IT and Operational Technology as well as physical security and security culture programme (including in global supply chain) for ~£24bn project.• Independent security assessor for nuclear projects using IEC62443 and ISO27001.• Advisor to delivery teams, senior leadership, and UK regulator, influencing strategy and improving… Show more • Set up first independent security assurance branch in EDF, increasing UK Government confidence.• Lead for programme of assurance activities, focussing on IT and Operational Technology as well as physical security and security culture programme (including in global supply chain) for ~£24bn project.• Independent security assessor for nuclear projects using IEC62443 and ISO27001.• Advisor to delivery teams, senior leadership, and UK regulator, influencing strategy and improving performance.• Chair of joint industry/Centre for the Protection of National Infrastructure (CPNI, now NPSA) working group. Show less

Bristol, United Kingdom

• Senior manager responsible for the overall production and co-ordination of cyber, physical and personnel security arrangements for Hinkley Point ‘C’ (HPC) and other EDF nuclear projects and advisor to joint venture projects.• Advisor for sensitive discussions with the UK government on foreign involvement in UK nuclear projects.• Consulted on UK government policy development for civil nuclear security working with CPNI and BEIS (now NPSA and DESNZ) and NCSC, including the first Civil… Show more • Senior manager responsible for the overall production and co-ordination of cyber, physical and personnel security arrangements for Hinkley Point ‘C’ (HPC) and other EDF nuclear projects and advisor to joint venture projects.• Advisor for sensitive discussions with the UK government on foreign involvement in UK nuclear projects.• Consulted on UK government policy development for civil nuclear security working with CPNI and BEIS (now NPSA and DESNZ) and NCSC, including the first Civil Nuclear Cybersecurity Strategy.• Member of Incident Management Team, providing security input into exercises and incidents. Show less

London, United Kingdom

• Produced integrated Security Case for major nuclear new build project, adopting leading edge security risk management approach. This was the first new build nuclear security plan ever to be approved by the UK regulator.• Provided assurance to Board in 2016 that security arrangements for HPC nuclear technology were adequate, removing final barrier to UK Government endorsement of Final Investment Decision for HPC Project.• Integrated UK and French design and security planning resources… Show more • Produced integrated Security Case for major nuclear new build project, adopting leading edge security risk management approach. This was the first new build nuclear security plan ever to be approved by the UK regulator.• Provided assurance to Board in 2016 that security arrangements for HPC nuclear technology were adequate, removing final barrier to UK Government endorsement of Final Investment Decision for HPC Project.• Integrated UK and French design and security planning resources to establish optimised arrangements.• Created Security Committee and security assurance team in early stages of delivery company set-up. Show less

• Delivered ISO 9001, ISO 27001, ISO14001 and PCI DSS compliance.• Introduced monitoring of Operational Technology to identify potential insider fraud and reduce losses.• Reduced group insurance costs by improving risk management framework, resulting in £1m+ of annual savings.

Responsible for UK and international delivery of risk assessments, business intelligence, security and training operations in private and public sector organisations and on behalf of VVIPs.

Promotion and regulation of UK private security companies operating overseas in high-risk environments.

Drafted new Army discipline and drug and alcohol policy, including global roadshow and management of regular training courses for senior executives. Also responsible for branch information security.

International experience in a variety of operational environments, including command of specialist troops in peace support and warfighting operations. Selected for liaison roles operating at national level in high-profile NATO operations.

Master’S Degree, Modern Languages

Minors in Management, Psychology and Arabic Studies.

Master'S Degree, International Security And Global Governance, Distinction

Dissertation subject was influence of privatised national intelligence functions on democratic governance.

Accounting, Business Operations, Project Management, Human Resources Management

Operational Planning, Management And Defence Science, Including Weapons Effects

Officer Training, Leadership And Tactical Military Planning

Leadership training