Stevenage, England, United Kingdom
Working collaboratively to provide security assurance to Okta's customers, focussing on EMEA region but also supporting our global function. Previous achievements: Selected for the Global Infrastructure Operations 2015 Development Programme Nominee for High Performer award for 2014. Winner of Computacenter's Global Infrastructure Operations division 'Rookie of the Year' award for 2013 (awarded in 2014). CISM ISO27001 Lead Auditor Working knowledge of: DORA, CIS20, Security Policy Framework (SPF) and associated supporting documents - including Government Classification Scheme , ISO27001 Information Security Management System Standard, PCI DSS, Data Protection Act Specialties: CCSK v5 IBITGQ® Certified Cyber Risk Management Practitioner (CCRMP) CISM ITIL Foundation in IT Service Management ISO 27001 Lead Auditor PRINCE2 Foundation & Practitioner qualified BTEC level 2 - 'Contract Security, International Visits and Document Handling' BTEC Level 2 - 'Undertaking Security Vetting in Defence Industry' ISO 27001 - Implementation of the standard & Internal Auditor (BSI course) ISACA Professional Membership Previously Security Cleared & DISA member
Working collaboratively to provide security assurance to Okta's customers, focussing on EMEA region but also supporting our global function.
Responsible for managing all aspects of physical and information security in an international systems integration and technology consulting environment. Working across the business from project managing ISO27001 alignment, writing and implementing company security policies, providing collaborative advice to consultants to advising the Board on risk. Duties Included: Ensuring compliance to SPF requirements along with reporting and presenting directly to the Board; Working with stakeholders across the business to achieve ISO27001 ISMS standard in 2006. Developing new policies and procedures in alignment with ISO27001, inc Business Continuity. Appointed “ISO27001 Project Manager” to ensure audit actions are completed and actionees are supported; Accreditation of internal networks where necessary, working with CLAS consultants in the development of RMADS; Managing effective liaison with external Agencies; Providing input for bids and tenders; Regular internal auditing along with assisting external auditors when necessary; Managing the life cycle of incidents from investigating through to lesson learning; Management of protectively marked assets.