Yousef Syed Email & Phone Number

London, Gb

Experienced Enterprise Architect and Security Consultant with a 25+ year track record:• Industry Expertise: Successfully collaborated with dozens of clients across diverse sectors, including Financial Services, FinTech, Pharma, Petro-Chemicals, Telecoms, Retail, Engineering, MedTech, AgriTech, Government, Edge Systems, IoT, and IIoT.• Client-Centric Approach: Committed to supporting clients’ security and privacy needs, ensuring robust protection for their critical assets.• Strategic Partnerships: Established strong partnerships with Managed Security Service Providers (MSSPs) and vendors, acting as a reseller and white-label consultant.• Global Impact: Delivered security strategy, architecture, and consulting services to businesses and private individuals worldwide, with a focus on London, EMEA, and beyond.• Areas of Specialization:o Identity & Access Management (I&AM): Expertise in designing and implementing IAM solutions, including Privileged Account Management and Machine Identity Management.o Securing Smart Devices, IoT & IIoT: Proficient in safeguarding medical technology, Edge Systems, and their interconnected ecosystems.o Zero Trust Architectures: Advocate for modern security paradigms that prioritize continuous verification and least privilege.o HNWI and Family Offices: Tailored security solutions for high-net-worth individuals and their unique requirements.o Virtual Chief Information Security Officer (vCISO): Providing strategic guidance and risk management at the executive level.o Enterprise Security: Adept at aligning security initiatives with business goals.o Holistic Approach: Combine security strategies, architecture, and consulting to create comprehensive solutions.CISSPCCSPCEH v9TOGAF 9.1 Enterprise Architect

Security Architecture & Hardening Standards Expertise⦁ Strategic Security Review: Conducted comprehensive evaluations of existing security capabilities and architectures across MEWA, assessing maturity levels and operational efficacy.⦁ Gap Analysis & Optimization: Identified and rectified gaps and redundancies in security capabilities, enhancing the quality and depth of service delivery.⦁ Conceptual Architecture Development: Engineered conceptual frameworks for all security capabilities, ensuring robust and scalable security infrastructures.⦁ CISO Advisory: Provided expert recommendations to the CISO for architectural and procedural enhancements, aiding in the prioritization of security investments.⦁ Hardening Standards Formulation: Authored overarching hardening standards for systems and technologies, fortifying security postures.⦁ Regulatory Compliance: Elevated compliance with NCA ECC standards, reinforcing regulatory adherence and best practices.⦁ Leadership & Mentorship: Acted as a mentor and advisor to the CISO office members, imparting best practices and assisting in solution design.

Royal Wootton Bassett, Gb

Delivered Comprehensive Security Architecture & Governance for Retail Client Demerger:⦁ Strategized and Defined a robust Security Stack and Toolset, establishing a clear RACI matrix for all service providers, ensuring a smooth demerger transition and ongoing operations.⦁ Developed a cohesive framework for Security, Privacy, and Legal governance, alongside a risk management structure, enhancing organizational resilience.⦁ Formulated end-to-end project governance policies, encompassing security, privacy, and legal requirements, to streamline compliance processes.⦁ Integrated governance frameworks with Secure SDLC and DevSecOps methodologies, providing clear guidelines and procedures for secure development practices.⦁ Advised on security and compliance best practices for new software developments and projects, reinforcing the security posture of emerging technologies.

Slough, Berkshire, Gb

IAM Platform Strategist for Reckitt Benckiser (RB) Business Units Split:⦁ Strategic Planning: Crafted a comprehensive IAM strategy and roadmap to guide the split of RB business units, ensuring a clear vision for future integrations and scalability.⦁ Process Enhancement: Significantly improved IAM processes and governance, optimizing the framework for robust identity management and access control.⦁ Security Control Review: Conducted a thorough review of existing IAM security controls, recommending updates to fortify the security landscape.⦁ Roadmap Development: Devised a detailed IAM Strategy and Roadmap, setting the stage for seamless future capability integrations.⦁ System Architecture: Architected and orchestrated the onboarding of key business applications and systems to the IAM platform, aligning with the overarching security strategy.

Basel, Baselstadt, Ch

Enhanced Identity and Access Management (IAM) Processes:⦁ Optimized IAM Governance: Streamlined IAM processes, elevating the governance framework to ensure robust identity management and access control.⦁ Security Controls Overhaul: Conducted comprehensive reviews and updates of Identity Management security controls, bolstering system defences.⦁ Onboarding Process Refinement: Refined IT System onboarding processes for IAM services, enhancing operational efficiency and user experience.⦁ ServiceNow Integration: Seamlessly integrated IAM onboarding processes with ServiceNow, enabling automated workflows and improved service delivery.⦁ SIEM and SOC Integration: Integrated IAM services with Security Information and Event Management (SIEM) and Security Operations Centre (SOC) systems, strengthening incident response and security monitoring capabilities.

Dublin 2, Ie

Key Contributor to E.On’s Digital Cloud Transformation Programme:⦁ Security Architecture Leadership: Developed a comprehensive Security Blueprint, guiding the transformation with a strategic security framework.⦁ Enterprise IAM Implementation: Spearheaded the integration of Enterprise Identity and Access Management (IAM), enhancing organizational access control.⦁ Consumer IAM Solutions: Delivered Consumer IAM systems, ensuring user identity security and seamless customer experiences.⦁ Application Security (AppSec): Enforced AppSec best practices, securing applications throughout the development lifecycle.⦁ DevSecOps Advocate: Championed DevSecOps initiatives, embedding security into the continuous integration and deployment pipeline.⦁ Security Best Practices: Instituted security best practices, elevating the security posture of the entire digital ecosystem⦁ Business Consulting: Provided Security and Privacy Consulting services to the business, aligning security measures with business objectives.⦁ GDPR Compliance: Ensured adherence to GDPR regulations, protecting data privacy and reinforcing compliance.

Santa Clara, California, Us

Cybersecurity Architect for Hitachi Rail Europe’s Smart Train Systems:⦁ Security Blueprint Creation: Authored the foundational Security Blueprint for predictive maintenance systems, setting the standard for future Smart City integrations.⦁ Security Architecture Development: Designed a robust Security Architecture to safeguard the new smart trains’ systems and data.⦁ Strategic Security Planning: Formulated a forward-thinking Security Strategy, aligning with Hitachi Rail Europe’s long-term vision for smart transportation.⦁ Cloud Data Centre Security: Applied best practices to secure the Syzen cloud data centre, ensuring the safe processing of train maintenance and monitoring data.Comprehensive Security Measures: Involved in all facets of security, including Application Security, Identity Management, Privileged Account Management, Infrastructure Security, Secure DevOps, Secure Business Intelligence, Secure Big Data, and Secure Connections between trains, data centres, and end-users.

Cincinnati, Ohio, Us

Proactive Security Leadership Across Projects:⦁ Security from the Ground Up: Ensured foundational security for all projects, including new applications, existing modifications, and enterprise-wide systems like VMWare, HSM, TPAM, IAM, ITSM, etc.⦁ Strategic Security Architecture: Provided security architecture for new initiatives, coordinating with product owners, project managers, architects, and development teams to guarantee end-to-end security and compliance with PCI, Data Privacy, and PII regulations.⦁ External IAM Solutions: Architected and implemented an External IAM Solution suite, including Oracle Identity Manager, Oracle Access Manager, Oracle Internet Directory, and Oracle Virtual Directory.⦁ Security Standards Creation: Established and elevated security and architecture standards, enhancing the organization’s security maturity level.⦁ Developer Training Roadmap: Developed an Application Security Roadmap to advance developer training and promote the use of better, reusable frameworks.⦁ IAM Coverage Roadmap: Crafted an IAM Roadmap through 2016, ensuring comprehensive coverage in a structured and achievable manner, encompassing internal and external IAM, 2FA, Federation, JML, and HRMS integrations.

Montreal, Quebec, Ca

Strategic Identity & Access Management Architect:⦁ Authentication, Federation, and Authorization: Led the evaluation and selection of optimal solutions for secure authentication, federation, and authorization within a critical government system.⦁ Complex Role Representation: Devised a robust approach for representing multiple, intricate roles, ensuring seamless integration within the agile, SOA ecosystem.⦁ Identity Management Design: Architected the Identity Management solution, aligning it with business needs and technical requirements.⦁ Stakeholder Collaboration: Collaborated closely with diverse stakeholders, bridging the gap between business and technical teams.⦁ Technology Stack: Leveraged technologies including Oracle Unified Directory, Oracle Access Manager, Oracle Internet Federation, Active Directory, and JBoss SOA.

New York, Us

Security Strategy & Identity Management Expert:⦁ Strategic Development: Spearheaded the creation and implementation of a comprehensive Security Strategy and Identity Management framework.⦁ Governance & Risk Management: Established governance protocols and risk management strategies, ensuring alignment with ISO 27001 and Security CMM standards.⦁ Application Security Leadership: Provided testing and compliance guidance, contributing to robust Application Security practices.⦁ Global Standards Implementation: Set and enforced standards and best practices across all global projects, enhancing security posture and consistency.⦁ Identity Management Systems Analysis: Evaluated and selected the optimal Identity Management suites (including Oracle, IBM SIM/TIM, and others) for GroupM, based on rigorous selection criteria.⦁ Technical Proficiency: Demonstrated expertise in a range of technologies, including .Net, SQL Server, Active Directory (AD), Exchange, SharePoint, Jive, ADFS, and TOGAF.

Integration Specialist for IB Boost’s Trading Systems:⦁ System Integration: Played a pivotal role in integrating Super Derivatives with Reuters Kondor Plus, enhancing the trading system’s capabilities.⦁ Collaborative Mapping: Worked in close partnership with Super Derivatives to map a variety of financial products to the Kondor Plus back-office systems.⦁ Project Management: Led the project delivery, ensuring secure connections between Super Derivatives and NCB, and resolving technical issues across international teams.⦁ Security Certification: Oversaw the security certification process for the IB Boost J2EE-based integration tool, affirming its reliability and safety.⦁ Technical Proficiency: Demonstrated expertise in Java J2EE, Spring, Hibernate, OSGI, and Eclipse, contributing to the project’s success.

London, Gb

Dual Expertise in Information Security and Technical Project Management:⦁ Information Security Manager: Provided expert consultancy in security, data privacy, compliance, and QA across various projects, including collaborations with NHS Local, UCL, RockCorps, Dream School, and Science of Attraction.⦁ Technical Project Manager: Ensured the seamless operation of all technical project facets, from conducting daily scrums with developers to overseeing business analysis, use case development, project planning, scheduling, budgeting, and resourcing. Made critical technical decisions, upheld quality assurance, and implemented industry best practices.

Armonk, New York, Ny, Us

J2EE Project Architect for Supreme Education Council (SEC):⦁ Project Overview: Developed a J2EE-based system enabling the SEC to license educators within Qatar’s school system, facilitating registration and application processes based on experience and role.⦁ Solution Architecture: Architected the solution, ensuring secure credential storage in LDAP and seamless integration with the licensing system.⦁ Implementation Management: Oversaw the implementation, defining design and code standards for security and quality to align with ISO 9001 standards.⦁ Technical Stack: Utilized a robust stack including Websphere Portal, Oracle 10g, IBM Lotus Quickr, and applied OO A/D UML methodologies with Rational XDE for design and development.

Armonk, New York, Ny, Us

Leadership in Development and Security Architecture:⦁ Team Management: Directed and resourced a talented team of developers, leading the charge in innovative software solutions.⦁ System Architecture: Designed connectivity between OID and OAM components, and architected the OIM Data Model. Collaborated with Oracle to create a custom performance patch for high-volume user management.⦁ Standards Development: Established design and coding standards to ensure quality and security, conducting regular review sessions to maintain high standards across all domains.⦁ Environment Architecture: Crafted the architecture for Development, Test, and Production Environments, deploying and configuring each to meet rigorous demands. Ensured high availability through clustering and load balancing in Production and UAT environments.⦁ Technical Proficiency: Demonstrated expertise in J2EE, OC4J, SOA, and Siebel CRM, with a commitment to best practices as evidenced by adherence to CMMI Level 3, ISO 9001, and CMMI standards.

Austin, Texas, Us

Oracle Identity Manager Expertise:⦁ Comprehensive Project Role: Leveraged Oracle Identity Manager to architect, analyze, design, and build a sophisticated application for user and resource management.⦁ System Capabilities: Enabled reconciliation, provisioning, reporting, auditing, and management of users, locations, and departments across various IT resources.⦁ Technical Proficiency: Demonstrated expertise in OIM 9.0, J2EE, Oracle 10g, and Websphere Application Server, utilizing OO A/D, RUP, UML, and Rational XDE for development.⦁ Standards Compliance: Ensured adherence to ISO 9001, ISO 27001, and Sarbanes-Oxley regulations, maintaining high standards for quality and security.

New Brunswick, Nj, Us

Unified EU and US Pharmacovigilance systems into a single application/database, enhancing global drug safety reporting.⦁ Data Privacy Compliance: Orchestrated secure, encrypted ETL processes for EU patient data using Oracle 10g’s DBMS Crypto package and Java Cryptography Extensions.⦁ Technical Oversight: Reviewed and approved detailed technical designs, developed coding standards, and led regular code reviews.⦁ Team Management: Directed an off-shore build team in Bangalore, resolving environmental issues and connectivity challenges with J&J’s VPN.⦁ System Upgrades: Transitioned the environment from BEA Weblogic 6.1, Oracle 8i, to BEA Weblogic 9.1, Oracle 10g, leveraging JDK 1.5, J2EE 1.4, Eclipse 3.1, Struts 1.2.8, and Actuate 8.

Dublin 2, Ie

Diverse Technical Leadership Roles:Johnson & JohnsonsThor Professional ServicesUBS

Tasked with Architecting, Designing of Provisioning and I&AM Solutions (Joiner-Leaver-Mover) using Thor’s Xellerate Provisioning application. This was performed on various Thor client sites including HBOS, Barclays Capital and ABN-Amro. [Xellerate is now Oracle Identity Manager - OIM]Key responsibilities included: • Identity and Access Management, Sarbanes-Oxley, Compliance issues and Java/J2EE Architectures – Joiner-Leaver-Mover process.• Worked with clients to understand requirements and architect a workable solution• Worked with pre-sales to scope out size of work and costs• Worked in sales-support roles to support proof of concept implementations• Installed and configured Xellerate• Integrated standard Thor out-of-the-box integrations for standard resources• Modified standard out-of-the-box integrations for the client's business requirements• Developed custom Reconciliation code and API's for client sub-systems using the Xellerate API• Developed custom Provisioning Adapters using custom Java code for client sub-systems to meet client requirements. Developed using a combination of: JDK 1.4, J2EE 1.3, Xellerate 8x, Eclipse 3.0, Websphere Application Server, Rational XDE, UML, OO A/D and Oracle 9i

Zurich, Ch

Account Workflow:⦁ AML/KYC Compliance: Developed a business-critical application for traders to adhere to AML and KYC regulations, separating Front and Back Office operations.⦁ Product Development: Architected and developed version 2 of the AML/KYC product, integrating it with the alerts system.⦁ Technical Proficiency: Showcased expertise in J2EE, Eclipse 3.0, Apache Tomcat, IBM WAS 4.0 on Solaris, Ant, Rational XDE, UML, OO A/D, Clearcase, and Oracle 10g database.

Armonk, New York, Ny, Us

IBM Commission Payment System Project Architect & Developer:⦁ System Architecture: Led the architecture and development of an internal Commission Payment System for IBM’s EMEA finance department, enhancing financial operations.⦁ UML Design: Meticulously architected and designed the entire system using UML, ensuring a robust and maintainable structure.⦁ Internationalization Framework: Implemented an Internationalization compliant framework using Struts 1.1, facilitating global usability.⦁ Quality Standards: Adhered to ISO 9001 and CMM Level 3 standards, employing the Rational Unified Process to maintain high-quality deliverables.⦁ Technical Environment: Utilized WebSphere Application Server 5, WebSphere Studio Application Developer (Integration Edition) 5.0, Struts, Tiles, Tag libraries, Java, J2EE, DB2, JTest, and Rational XDE Developer Plus for Java to build a scalable and secure application.

Dhahran, Sa

Java/J2EE and OO Architect & Mentor:⦁ Division Leadership: Served as the Java/J2EE and OO Architect, overseeing the division’s Java/Intranet software development and ensuring best practices.⦁ Standards Development: Authored the division’s Java Coding and Development Standards Guide, establishing protocols for source control usage and application deployment.⦁ Secure Framework Creation: Tasked with developing a secure Java Framework/Architecture for Documentum application development, enhancing system security.⦁ Mentorship: Provided mentorship to new Java/OO developers, fostering skill development and conducting weekly design and code review sessions.⦁ Technical Proficiency: Utilized a suite of technologies including Documentum Java API, JSP, XML, Unit Testing, Oracle 8i, JBuilder 7, IntelliJ IDEA, UML, OOA/D Rational Rose, Apache Tomcat, and BEA Weblogic 7.

Cincinnati, Ohio, Us

J2EE Application Framework Developer & Mentor:⦁ Legacy System Integration: Developed a J2EE (EJB) application framework that integrated the functionality of two legacy Mainframe systems, providing a web-based front end for external customers.⦁ Team Mentorship: Mentored and trained the existing Visual Basic development team in Java, OO technologies, J2EE Architecture, and Enterprise Java Beans (EJB), facilitating a smooth transition to modern development practices.⦁ Design and Development: Utilized extensive UML OOA/D throughout the development lifecycle, creating solutions with Rational Rose, Borland JBuilder 4, TOAD, and Oracle 8i.

Security Architecture Developer:⦁ Security Architecture: Developed and implemented the application’s Security Architecture, integrating the Java 2 Security API with Java Authentication and Authorization Service (JAAS) 1.0 to secure the entire application.⦁ Project Delivery: Delivered a fully tested Security Framework well within the ambitious three-month deadline, demonstrating efficiency and expertise.⦁ Development Methodology: Employed a Test-First XP/Agile development methodology, ensuring quality and adaptability throughout the project lifecycle.⦁ Technical Tools: Utilized a suite of development tools including JBuilder 4.5, Rational Rose, MKS, BEA Weblogic, and Apache Tomcat to build a robust and secure application.

It

Web Application Development Leader:⦁ Multidisciplinary Leadership: Served as an OO Architect, Java Developer, and Team Leader, spearheading the construction of robust Web Application infrastructure.⦁ Application Development: Developed comprehensive Internet, Intranet, and Extranet Applications for various departments, enhancing organizational connectivity and functionality.⦁ Standards and Review: Authored the Java Development and Coding Standards Guide and led regular design and code review sessions to maintain high-quality standards.⦁ Technical Proficiency: Demonstrated expertise in a wide array of technologies including Java, JSP, JHTML, EJB, XML/XSL, HTML, Toplink for Java, Oracle 8i, SQLServer 7.0, Borland JBuilder 3.5 on Windows NT 4.0, Netscape Enterprise Server, MS IIS 4.0, Sun Solaris with Apache, JRun, Inprise Application Server 4.0, and BEA Weblogic 5.5.

Gb

Server side development for Web based Internets, Intranets and E-Commerce. Used Java, JHTML, Servlets, Oracle 8 and MS SQLServer.

Java OO Architect and developer for a new distributed, component based, Java application to replace an existing legacy bespoke product. Developed using TogetherJ, Inprise JBuilder 2.0, Java 1.1 and MS SQL Server.

Bsc, Computer Science

Bsc, Computer Science