Thomas Whipp Email & Phone Number

Sheffield, Gb

Uk, Australia, Spain, Chile, Poland, New Zealand, Hong Kong Sar, Türkiye, Brazil, Mexico, The Us, Middle East, Ireland, Saudi Arabia And India., Gb

I joined Bupa to build a dedicated IT risk team within the second line of defence. The team has ranged between three and nine staff depending on workload. Major activities have included:Oversight and challenge of a multi-year £100M+ cyber security uplift programme (Infocare) – notably the capability and culture of my team was cited as a positive factor within a skilled persons report which led to the closure of a key RMP.Supporting technology led business transformation programmes, including our Digital agenda Delivering an annual programme of assurance reviews. My priority has been to build open relationships and trusted with 1LOD colleagues. As a result we are often sought out by members of the senior IT team to discuss initiatives and proposals at an early stage. This close relationship has not however come at a loss of independence, we routinely provide strong and challenging feedback – although in the majority of instances this is at a sufficiently early stage to be resolved prior to final paper submissions.I work regularly with multiple members of our Executive team and provide independent opinion within the board and risk committee meetings of our regulated entities (BINS/BISL).I am part of the Women in IT mentoring scheme every year while working for Bupa providing monthly 121 career development coaching to a junior or mid-level member of the IT function.

London, England, Gb

Charles Taylor provides a wide range of insurance services including, managed technology platforms for Lloyds, management of P&I clubs, a wide range of loss adjusting and a Lloyds Syndicate. The CISO role was new to Charles Taylor with the group having no prior professional security capability in place. I grew the security function from a zero base to 6x FTE and reduced security incidents from 2+ per week to less than 1 per month through a multi-year security roadmap. I worked regularly with our executive team and led the technology due diligence on a significant number of potential group acquisitions ranging from small scale start-up technology firms through to the groups £29.8M acquisition of CEGA.

London, Gb

Management of group wide risk process and key liason with internal audit of an FSA regulated firm.

London, Gb

Development of security capability within a brown field organisation. Security integration of over 30 small acquisitions into group standards. Management of security requirements and improvements for key managed ("cloud") software suppliers

London, Gb

Management of two ISO27001 scopes, management of the LiNK (ATM) security team, security review of the online element of the Faster Payments Service.

Gb

Responsability for technical services program, operational security, IT compliance and risk and electronic trading relationships.

Gb

Expansion of previous security specific role to include management of data protection, business continuity planning and general risk/compliance tracking for the IT department.

Gb

Establishment of a technical security capability within the Insurance Division of Provident financial. Analysis and upgrade of most technical controls, justification and recruitment of technical security team, incident management, definition of processes to support HR, risk analysis, etc...

Security consultancy work involving both high performance network security solutions and management best practice advice (BS7799 analysis).

secure payment integration for e-commerce sites.

Msc, Security And Risk Management (Distinction)

Meng, Computer Systems And Software Enginering