Rothesay

Head of Security Engineering

Bank of England

Deputy CISO

Senior Manager

Head of Threat & Vulnerability Management

DevSecOps

Cigital, Inc

Managing Consultant

Senior Security Consultant

Software Security & Testing (IBM Rational)

Software Developer in IBM

🔴 All posts are my observations of the general landscape meant to engage and educate. NOT problems I'm encountering. All views are my own and not that of my employer. I’m a techie, not an economist.

🔴 Please don't invite me to meals, drinks or round tables. ALL requests will be ignored.

I help CIOs in dynamic organisations reduce cyber risk, by developing pragmatic cybersecurity functions that align with the business needs and have a proven track record of increasing simplicity and promoting accountable visibility. 

I'm a Technical Cyber Security Leader with over 17 years of experience within start-ups, management consulting and top-tier organisations. Extensive hands-on experience with Security Architecture, Engineering, DevSecOps, Security Posture Management, Penetration Testing & Red Teaming.

Engagements, Awards, Articles and Education

🔵 InfoSec Europe, Advisory Board • 2024
🔵 e-Crime & Cybersecurity Congress, Lost in Translation • 2024
🔵 Webcast, Control Effectiveness • https://www.brighttalk.com/webcast/19525/609336
🔵 SASIG, Adapting to the new cyber threat landscape • 2023
🔵 Central Banking African Summit, x4 talks over 2 days • 2022
🔵 CyberCon, Hosted fireside chat: BoE, LSEG, MS • 2022
🔵 Secure Southwest, High-value security testing • 2019

🟢 National Cyber Awards, Winner of the Financial Services Award • 2023
🟢 BCS Awards, Finalist for High Impacting Business Project • 2021
🟢 SC Awards Europe, Finalist for Best Security Team Europe • 2019

📒 Preparing your Organisation for AI Cyber Warfare • https://tinyurl.com/df-ai-war
📒 Finding High-Value Security Initiatives • https://tinyurl.com/df-sec-roi
📒 No Bullsh*t Approach To Simplifying Cyber Supply Chain Risk • https://tinyurl.com/df-supplychain
📒 Critical Vulnerability Management Cheat Sheet • https://tinyurl.com/df-cheat

📕 Master of Business Administration (MBA) • Exeter University, 2021
📕 Bachelor of Science (BSc Hons), Computer Systems & Networking • University of Plymouth, 2007
📕 CISM, Certified Information Security Manager • ISACA, 2016
📕 CISSP, Certified Information Security Professional • (ISC)2, 2011
📕 CSSLP, Certified Secure Software Lifecycle Professional • (ISC)2, 2014

Dave F.

Railpen

Head of IT Security

Cyber Security Operations Manager

Davies Group

Working in the Cyber Security team I have a wide remit from advising on best practices, updating organisational policies, reviewing security products and solutions and reviewing security exemptions through to configuration of web proxy, DLP, AV, Anti-malware, SIEM, Email filtering, IAM, firewall reviews and organising Pentest and Cyber Essentials Plus amongst other functions. 

Working closely with Information Security and Compliance teams I attend IT Security Committee meeting I advise on Cyber Security risks, remediation and various aspects of ISO27001.

My role includes being involved in projects for mergers and acquisitions helping provide a steer on implementation and approaches regarding cyber security.

Cyber Security Engineer

Aviva

Working in the Threat and Vulnerability Management team my role includes triaging vulnerabilities, managing the vulnerability scan engines & producing reports for the markets across the entire Aviva portfolio. Responsibilities include:
•	Triaging vulnerabilities through a rating process, and escalating for remediation. 
•	Working with an internal Threat Intelligence team to determine criticality of vulnerabilities
•	Implementing a structured rota for daily services checks & remote working for improved efficiency
•	Developing a structured workflow for requests via sharepoint still ticketing system to manage delegation and track demands of the service, including any bottlenecks.
•	Maintaining relationships with Aviva markets to ensure assets are scanned without affecting service. 
•	Regular reporting on authentication, coverage as well as the number of assets and vulnerabilities.
•	Managing operational requests including ad hoc scanning and reporting of individual assets to ensure swift remediation of critical vulnerabilities through patching or configuration. 
•	Project management of audit issues to provide assurance on vulnerability management. 
•	Working with internal change colleagues to ensure timely remediation of third party exceptions

Security Analyst

James Paget University Hospitals NHS Foundation Trust

Managing all aspects of IT security, I regularly liaised with information governance to ensure collaboration between the two departments. As well as updating policies I have created an IT security strategy for the trust which includes vulnerability management, mitigation and incident response. To keep up to date with the latest threats we are an early adopter of NHS Digital which publish alerts to the trust on a regular basis. These threats are risk assessed, scored and prioritised accordingly. I attend regular webinars and seminars to ensure we are kept up to date with the latest information, technology and strategies. In order to obtain funding for additional security measures I have created several business cases for vulnerability scans, penetration testing, email phishing campaign and anti-ransomware software. I am also technically hands on so I manage upgrades, patching and migration of our security products such as web filtering, email filtering and anti-virus appliances and software. 

A proportion of my work is managing projects for both the IT department and other departments around the Trust. I manage, implement, migrate and update all aspects of physical and virtual servers. Recently creating vCenter Server appliance with vSphere Replication appliance and migrating web appliances and management appliance from physical to virtual. I am currently migrating our AV from on premises to Cloud based and migrating some VMware servers using Virtual Machine Manager to Hyper V.

Technical System Specialist / IT Security Lead

Global Diagnostics UK

Working in the private medical sector I am responsible for all UK IT support for Global Diagnostics. My role included managing and supporting infrastructure at head office, the data centre and other key sites. I am experienced in setting up VM Ware environments and installing instances of Server 2008 R2 with Exchange 2010. I installed two VMware vSphere 5 environments, one located in the Data Centre and the other at a remote site location in Northampton.  I managed everything from Windows update & taking snapshots to Veeam backups and replication. I setup remote access using VPN over the iPhone so we can manage the virtual machines remotely.  

Working closely with the NHS and the N3 network I help to ensure ISO 27001 and IGSOC compliance was maintained at all times. I am experienced in setting up VM Ware environments and installing instances of Server 2008 R2 with Exchange 2010. 

I was also application support for the Radiology Information System which included facility, user and document creation and management. I improved the infrastructure significantly using group policy, deploying software & installing spiceworks for managing tickets. I maintained and managed connectivity to modalities such as Ultrasound Machines, X-Ray Equipment and MRI vans

IT Network Administrator

I am an experienced IT professional with a proven track record of delivering solutions that exceed end-user expectations. I am an ambitious individual, continually seeking to acquire new skills. Flexibility and adaptability are second nature, giving me the ability to think on my feet, make informed decisions and thrive in a high-pressured environment. 

My biggest achievement to date is the IT Security Strategy I produced and delivered against for an acute NHS Hospital Trust. By linking in with the National Cyber Security Centre, NHS Digital and other organisations I improved the overall security posture of the hospital.




💻 Bryan Kavanagh

taplio

The Battle

Dave F.

💻 Bryan Kavanagh

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?