Terry Prior Email & Phone Number

Dunedin, Otago, New Zealand

Developing and implementing security policies, procedures, and standards.Managing the information security program.Ensuring compliance with regulatory requirements.Conducting risk assessments and developing risk management plans.Developing and implementing business continuity and disaster recovery plans.Providing guidance and support to IT staff and other stakeholders.Conducting security awareness training for employees.

Dunedin, Otago, New Zealand

INFORMATION SECURITYLeading the development and continuous improvement of strategy, policy, frameworks, practices and activities for Information Security. Alignment with standards including NZISM, ISO27001/2, NIST, COBIT, ITIL.Leading the Cyber Security improvement program, including the development and delivery of a Cyber Security awareness program to all staff, with follow-up activities such as phishing campaigns.Implementation and monitoring of Cyber Security controls and tools.Acting as a trusted advisor to both IT and non-IT departments.Reporting to Executive Leadership Team.ENTERPRISE RISK MANAGEMENTLeading the implementation of an organisation-wide Risk Management strategy, policy and Framework.Implementation of a Corporate Risk Register.Department-level Risk identification, classification, prioritisation and Risk Mitigation action plans.Continuous improvement and senior-level reporting.BUSINESS CONTINUITY MANAGEMENTLeading the implementation of an organisation-wide Business Continuity strategy, policy and framework (aligned with BCI standards).Stakeholder engagement to ensure all BCM requirements are fulfilled.Establish RTO/RPO for key Business functions and activities.Ensure BC plans are kept up to date.Orchestrate BC and DR testing schedule.

Dunedin, Otago, New Zealand

Working as part of the Office of Risk and Compliance, reporting to the Director. I am responsible for several departments within the University as their advisor on all Risk and Compliance topics. Duties include:Managing a portfolio of Risk Plans for University departments.Initiation and ongoing management of Audit activities.Assisting University departments with their Business Continuity and Disaster Recovery plans.Ensuring compliance of Policies, Processes and Guidelines.Providing training on Fraud and Conflicts of Interest.

Dunedin, Otago, New Zealand

Carrying out a full IT Policy and Process review for a major Financial Services client.

London, United Kingdom

IT Risk, Process, Governance, Business Continuity.UK Lead for Production Delivery and IT Risk Management, managing two teams covering Production Service Delivery, IT Risk Management, Business Continuity \ Disaster Recovery. Reporting to UK Head of Production Services.Member of: UK IT Production Board, Global Service Management Board, Global Production League Board, UK Culture & Conduct CommitteeResponsibilities include: - Ensuring production processes are managed in line with global KPIs \ KRIs, aligned to COBIT and ITIL frameworks. Includes, Major Incident, Change\Release, Problem, Capacity, Event, Availability Management. - Team is responsible for performance reporting (weekly, monthly, quarterly reports and dashboards). - Business Continuity \ Disaster Recovery. Ownership of these processes for UK IT teams. - IT Risk Management: managing ITRM for UK IT teams (COBIT and CRISC governance and standards). Following KRIs including Production Incidents, Changes, DR testing, Audit & Regulatory requirements, Legacy Management, Vendor Management. - Head of UK Production Practice Leagues, reporting to Global head. Bringing together members of all UK IT teams and working towards establishing common standards and processes. - Culture & Conduct Lead Partner for UK IT. Working with all business lines across the company to ensure regulatory and behavioural standards expected by the Bank are managed and maintained. - CSR Champion, engaged with CSR community to organise charitable events\activities. - Mental Health First Aider (MHFA) trained.

London, United Kingdom

A transversal role within Production Services, comprising ITIL Service Delivery and IT Risk Management (including Business Continuity\DR), covering the UK and EMEA region. Reporting to the EMEA Head of IT Production Services. Member of local Production Services board.•Define and manage ITIL processes for Production Services, as EMEA representative in the Global Service Management community. •Rollout ITIL processes across EMEA region (Major Incident, Incident, Problem, Change, Request•Change and Problem Manager for EMEA region.•Continual Service Improvement – identifying issues and trends and implementing improvement plans.•Define and run MIS dashboards to EXCO level.•Contribute to quarterly and annual global service review packs.•Manage the Business Continuity\DR process and own the relationship between technology teams and business lines. Ensure integrity of DR plans and availability of systems. Arrange regular DR testing.• Main point of contact in Production for Information Security team.• Follow-up of audit recommendations (internal and external).• Carry out Permanent Supervision controls and associated governance.• Manage Operational Loss Collection process.• Ensure audit recommendations are fulfilled• Active participant in company ‘extra-curricular’ activities, such as volunteering and charity events.• Successfully completed ITIL v3 Foundation certificate.

• First point of contact for all Business raised issues. • Ensure that all Incidents and Service Requests are allocated and investigated within agreed service levels.• Liaise with Business Analysts and Technical Support team on service failures, identify workaround solutions and initiate root cause investigations. • Proactively monitor incidents to identify user training and support requirements and recurring problems.• Understand application architecture, including interfaces and business data, to advise Finance on optimising their use of technology. • Reviewing user requests for service, ascertaining the correct policies and procedures to implement a swift resolution or allocation to the correct resource. • Involvement in application upgrades and releases, co-ordination Regression Testing and ensuring Operational Acceptance Criteria is adhered to. • Produce MIS reports • Maintain user and IT training and process library.

• Holding regular meetings with each business unit to identify IT requirements.• Point of contact for the business to escalate outstanding issues.• Define and review Service Level Agreements, and chair Service Review meetings with the client.• Produce a regular Service Review pack detailing service performance, incidents\changes etc.• Continual Service improvement, identifying and implementing a Service Improvement Plan for each business area, which is reviewed at client meetings.• Representing the business community regarding Change Management, attending twice-weekly global conference calls and assessing potential risk to the business regarding changes.• Incident Management – actively involved in any major incidents and communicating impact of outages to the business users.• Involvement in the company audit, carrying out an application re-certification project to ensure audit compliance.• Working closely with the Projects team, actively involved in projects including software rollouts, upgrades etc.• Business Continuity. Liaising between the business and the Business Continuity team to ensure plans are maintained and test are carried out.

• Administering user access and maintaining security policy on Active Directory, Exchange, LDAP, Citrix, RSA, Blackberry, DFS.• Financial Systems role based access management (500+ Applications i.e. Crest, Bloomberg, Swift Alliance, Reuters)• Enterprise wide AD Administration/Security Provisioning• Data Cleansing / NTFS permissions• Security role definition and application / account certification.• Management of the joiner, leaver and mover process.

During this period I was engaged in contract roles such as Senior Technical Support\TradeFloor Support and Server Infrastructure Support for the following clients:UBS Investment BackWest LB BankStandard Chartered BankMerrill Lynch

Responsible for the day-to-day support of all servers/backups/anti-virus/SQL servers and Market Data systems. I also successfully completed several projects, including NT4-W2k server migrations, installation of a full antivirus infrastructure, migration from Arcserve to Backup Exec, devising and testing a Disaster Recovery \ Business Continuity Plan. Core Responsibilities: • Market Data support (Reuters 3000, Bloomberg, Datastream)• 1st line support of the BT Meridian Telephone system, Audiolog Voice Recording and IPC Dealerboards.• Server monitoring using Compaq Insight Manager• SQL server administration and client applications• Domain administration (user accounts/profiles etc)• Management of backups using Veritas Backup Exec• Administration of AV system using Symantec Anti-Virus• Disaster Recovery plan• Mailsweeper• Liaison with third-party suppliers (e.g. Reuters)• Change Control• Inventory Management• Procedures and documentation

During this period I was engaged in contract roles such as NT Rollout Engineer\Trade FloorSupport and Desktop Support Analyst for the following clients:Deutsche BankWest LB BankLegal & GeneralSocgen-Crosby Securities

Site Operations Supervisor, Royal Bank of ScotlandManaging a team of support engineers and helpdesk staff, carrying out general hardware and software support, as well as moves and installations.

I had various roles within ICL:Operations Manager - NatWest.Helpdesk Manager – ABN AmroTeam Leader – Lloyd’s of LondonField Service Engineer