Ben Keeley Email & Phone Number

Funciton as PCI DSS Specalist for AXA UK and a security consultant supporting the Head of Business Security.

Senior Infosec SME working on projects for AXA Health and transversally across AXA UK.

Royal Tunbridge Wells, Kent, United Kingdom

Functioning as the PCI DSS Internal Security Assessor (ISA) for AXA PPP and its subsidiaries

Joined Vanquis Bank as an Information Security Specialist however as part of the ongoing organisational development I was asked to pickup a new role of IT Security Risk Manager. Activities completed include:- Key resource in the completion of PCI DSS attestation activities to ensure Vanquis's ongoing compliance. Functioned as principle QSA liaison during the 2016 PCI assessment.- Created an IT specific risk management toolset and managed all IT risk assessments- Maintained Information Security Policies and Standards for Vanquis- Completed IT Risk vendor vetting for all new partner organisations- Functioned as independent technical SME in the assessment of vulnerabilities and troubleshooting complex security issues- Provision of Information Security consultancy to a number of critical business programmes- Developed Audit & Risk Management Dashboard for reporting into Strategic and Head of Department management

IT Security Manager for both charitable and financially regulated sides of the CAF business. The role requires a unique blend of technical and non-technical skills, such as the ability to carry out in-depth security vulnerability assessments or develop critical IT security policies.Key Achievements:- Completed required technical activities to ensure compliance with PCI DSS-The creation of an effective risk assessment process and risk register- Assessed a number of SIEM solutions, carried out various proof of concept exercises, documented the business case for a SIEM, deployed the chosen SIEM and now maintain the SIEM installation- Creation and documentation of improved technical security hardening baselines- Creation of incident management process- Carried out a number of proof of concept exercises around Web Application Firewalls and the integration of these with core systems- Presentation of technical risks and hacking threat vectors to C-level executives- Produced ISO 27001 compliant IT Security policies for entire organisation

Influential member of the CSC Global Security Solutions team which provides security architecture support, security vulnerability testing, Information Security compliance, disaster recovery and security firewall approval support for the NHS contract. Principal technical security point of contact for all activities within the NHS account. Regularly acting as both security design approver and facilitator; bringing the various technology groups together to resolve complex technical issues whilst maintaining a secure design approach. A key responsibility is providing security assessment and approval of solution designs and firewall requests within the NHS account across multiple data centres and system architectures. Regularly required to interface directly with NHS Connecting for Health Information Governance and Technical Assurance staff to document and then discuss the outcome of external penetration testing, including any projected remediation or mitigation activities. Act as the technical resource in face-to-face ISO/IEC 27001 audits of both internal and external parties within the NHS contract. Function as escalation point for any technically complex security issues within the NHS account or any IPS/IDS alerts requiring further investigation. Utilise open source and commercial tools in the security vulnerability assessment of specific services such as Nmap, Nessus and Burp suite.

Senior member of a European project team which provides Citrix consultation, design and implementation services for some of CSC’s most prestigious clients. As a Citrix engineer I was required to build solutions for a variety of clients (including NHS, BAE & Whitbread), which in some cases included extensive security hardening and security vulnerability testing. As a senior member of the team I also functioned as a technical lead for a number of offshored resources in the successful delivery of solutions.

Member of a team working at various data centres providing infrastructure build functions (DNS, WINS, AD, etc) and 3rd line support to Microsoft solutions for CSC customers. Frequently took lead technical role on Service Restoration Teams and Root Cause Analysis investigations for Disaster Recovery purposes.

Technical team leader of server support team based at CSC's main data centre (at that time). Carried out various successful projects including installation of a Windows based payroll system.

Member of Desktop Services team, principle role being the provision of 2nd level support and technical mentoring of the desktop engineers.

Working on behalf of Microsoft supporting Windows NT, Windows 98, 95 and Mac OS based Microsoft products.

Member of an eight man team providing 2nd line support to ICL's Point of Sale Help Desk.

London, United Kingdom

Worked as part of a five man engineering team at J Sainsbury’s Head office in Blackfriars. Day-to-day duties included resolving hardware and software problems within J Sainsbury’s.