Graeme C

I speak at a wide range of conferences and events. My talks focus on Cyber Security in the commercial sector but also draw upon experience with Nation State Actors and Cyber Warfare. All talks can be tailored to a specific audience.

Linking industry experts with Charities and locally funded school organisations for free security advice and consulting.

• Built a 'greenfield' Global SecOps function comprising Identify (Pen Test), Protect (Architecture and Engineering), Detect (Security Monitoring) and Respond (Incident Response) functions over a period of 6 months, growing the team from 2 to 14 and setting the foundations for scalable growth. • Defined Security baseline architecture and roadmap to reduce overall TCO whilst reducing operational overheads. • Conducted multiple vendor assessments, PoCs and value-based trials prior to integrating key (BugBounty, Web Proxy, Endpoint Detection and Response, Vulnerability Scanning).

• Developed the security strategy for a growing cloud native (AWS, Docker, Kubernetes) app-based finance platform backed by Santander. • Conducted organisational design of the information security function to allow for ongoing growth in support of IT and Legal departments. • Managed a variety of vendors – internal and external to deliver security solutions to the team. • Build the GDPR privacy framework to allow for privacy compliance whilst scaling the platform. • Provided technical SecDevOps advice to the development team on a current microservices and cloud native tech stack. • Gained FCA approval and ensured compliance with PSD2 frameworks for application launches.

• Developed new and ongoing trusted client relationships with CISOs/CIO/CTO level positions across a range of FTSE250 organisations (Fintec, Big Banking, Pharma, Legal, Retail) and high-profile public-sector organisations. • End to end management of engagements from including BD, proposal development, profitability scoring, budgets, deliverables and future opportunity assessment. • Developed and refined an NCSC/SANS based risk and maturity assessment and associated sales collateral. • Designed and developed the organisations cyber security practice including proposition development, cybersecurity collateral, outsourced PR and Marketing, resulting in exposure across a wide range of publications (Times, InfoSec, Computing, V3 and SCMagazine) • Delivered across a wide range of engagements most recently; o Security architect for one of the largest public-sector communications programmes interfacing between 3 supplier groups, a wide customer base and design, test and assurance teams. o Head of information security for a global high street bank’s greenfield FinTec business, responsible to the board for security input into TOM design, vendor selection, SecDevOps tooling, FCA application.

Acted as the principal Risk Advisor to one of the leading MOD cyber research units. Provided Direction and Guidance into National Cyber Research Programmes.

Led a multinational team of IT specialists responsible for providing a deployed IT network and headquarters to multiple NATO countries.

Led the IT Department consisting of 140 personnel supporting one of the foremost Regiments in the Military.

Led the operations team managing 80 communications specialists (Engineers and Operators) to deliver secure strategic and tactical communications in support of 3 lines of operation, both domestic and overseas.

Maintained all aspects of physical and information security for a NATO headquarters establishment in Kandahar, Afghanistan.