Tim Heffer Email & Phone Number

London, Gb

London, Gb

London, Gb

I am responsible for access management, data security and cyber governance for RSA. I have significantly improved the capability of the team across all areas of responsibility and regularly deputise for the CISO with the Board and Regulators.- Enhanced our access management capabilities through the introduction of new tooling with associated automation, multi-factor authentication and enhancements to the scope and capabilities of our privileged access management tool.- Introduced dedicated cyber awareness activities for all RSA international businesses including the implementation of a platform for phishing simulation exercises.- Introduced standardised reporting, metrics and associated governance for CISO.- Group owner for the Information Security and Acceptable Use Policies for all RSA international businesses. Re-wrote the information security policy and standards to be consistent with good practice. Provide advice to multiple regions including Europe, Canada and Middle East.- Responsible for all Data Security tooling and processes including data classification. Introduced a number of additional capabilities.- Introduced risk management improvements including implementation of GRC and improved third party management capabilities.

London, London, Gb

Responsible for the implementation of second line IT oversight for the IT departments that support the Asset Management, Insurance, Retirements and Savings Businesses. I created and chaired a Technology Risk Forum to provide thought leadership for the wider IT Risk community and also provide SME risk advice for procurement, facilities and change. Responsible for the creation of a framework in order to review all Cloud implementations to ensure they meet regulatory requirements. Responsible for managing the delivery of regulatory responses including Cloud.

London, Uk, Gb

April 2013 - January 2015Senior Risk Manager - IT ResilienceResponsible for managing the team to deliver the Lloyds requirements for the FCA IT Resilience Review, managed the delivery and remediation of the associated required control testing and managed the risk response for the FCA and PRA "Dear Chairman 2" response.February 2012 – April 2013 Senior Business Partner - SD Delivery AssuranceSenior risk manager providing delivery assurance over all IT infrastructure programmes including data centre migration, IT security and IT rationalisation projects. Personally responsible for providing delivery assurance of programmes with an annual budget of £200 million.May 2011 – February 2012 Risk Partner - Major ProgrammesAs a risk manager within the Major Programmes team I was responsible for the delivery of high profile IT Risk related projects and the implementation and management of the CoBIT based IT control framework.

Horsforth, Leeds, Gb

June 2010 – May 2011 Programme Manager, London Underground Responsible for a £130m multi disciplinary programme to support the SSL signalling upgrade. Individual projects included new software, modifications to existing software, new hardware, provision of testing facilities, cultural change, office relocations, departmental restructures, improved company processes and a number of surveys. June 2009 - June 2010Procurement Programme Manager - BAAResponsible for the delivery of the procurement and contract management of third party resources required by BAA to deliver the £12bn Heathrow Third Runway project. April 2008 - June 2009Stakeholder Manager, TeighmoreStakeholder manager for the Shard project including programme management of associated projects.

London , Gb

Master Of Science (Msc), Computer Science

Bachelor Of Arts (B.A.), Economics

Education record