CHRISTIAN STEPHENS , Gravesend, United Kingdom

I have delivered security components to a number of CGI clients like Ministry of Justice , City Bourough of Edinburgh , Galileo, ELEXON, National Grid, Home Office, Metro Bank, WorldPay, Trevis Perkins, Taylor Wimpey, NHS and a few FINTECH Companies . Each project involved the use of a broad variety of my technical, architecture, governance, risk, and compliance skill set. In each scenario, my tasks were successfully accomplished and the deliverables produced utilised skills including risk assessment and treatment, technical documentation review and security assurance.
Examples of activities undertaken:
▪ Strong Delivery security architecture design and implementation in AZURE, AWS, O365
• Creation of new, and update of existing policies, procedures, and process documents to ensure their compliance with security requirements were aligned with the organisations’ objectives and international security standards of best practice.
• Adviced the electricity industry clients on the development of a security road map for business, implementing and recommended changes, giving guidance on cloud migrating technologies (e.g. AZURE and AWS) implified client security monitoring by assiting with the implementation of vulnerability scanning tools (e.g. AlienVault , Nessus and GFI).Initiated and managed an Identity Management project for one of the leaders in electricity industry by implementing Okta identity layers, MultiFactor Autentication (MFA), Single Sign On (SSO) and Access Program Interface Access Management (API – AM )Involved in ensuring that the company client had and maintained PCI DSS compliance with in-dept log analysis.Licence management, review and update SAM (Software Asset Mgt ) and HAM ( Hardware Asset Mgt ) , NeuVector.
• Migration activities from data centres to cloud systems and architecting the cloud migration / implementation in Azure and AWS. Technical Risk Analyses, assessment and mitigation
• Taking the ownership of security for the HLDs and LLDs, SMP, KMP, DIAP , contributing to developing the policies, processes and procedures to ensure a comprehensive set of Information Security documentation.
• Working knowledge on Confluence & Jira. Agile Programming experience using C, C++, Python, Java, BASH, Powershell etc.
• Practical Experience of ‘CIS Top 20’ controls and practical application . Awareness of the SABSA Enterprise Security Architecture framework
• Creating and refining client Business Continuity and Disaster Recovery Plan.
• Identify resources and systems to be monitored using ensuring client expectation and demonstrate compliance with the ISO/IEC 27001 control area A.12.4
• Leadership, coaching and mentoring of relevant stakeholders in Business, Technology and Cyber Teams
• Implementing HMG information security policy and standards frameworks