danielle brown

it security manager

About

An experienced and consummate Information Security, Risk and Governance professional, accountable for the strategy and delivery of the Information Security and IT Controls and Compliance Framework throughout Europe, Middle East & South Africa. Motivated in evaluating risk across complex and disparate landscapes, through considered and tactical planning; ensuring the appropriate level of protection is operating and aligned with business objectives. Successful at orchestrating thoughtful and sustainable security and compliance strategies, we were able to deliver visible and meaningful change and reduce cultural resistance throughout $20+ billion organisations. Core Competencies CISM (Certified) CISA (Certified) Risk Management Security Awareness Policy Management – Frameworks (ISO27001/NIST/COBIT/PCI-DSS) IT SOX, Compliance & Audit Oversight ITIL Service Management (Certified Manager) Disaster Recovery & Business Continuity Management Stakeholder Management Team Leadership Communication & Presentation Skills

Country

united kingdom

City

manchester

Industry

construction

Skill

security, information security, it audit, disaster recovery, business continuity, sarbanes oxley act, project management, change management, itil, iso 27001, information technology, pci dss, governance, risk management, cisa, process improvement, security audits, risk assessment, leadership, cobit, it strategy, intrusion detection, integration, vulnerability assessment, compliance, security awareness, vendor relationships, strategic thinking, vendor management

Experience

regional it technical field support manager

tyco fire & integrated solutions (uk) ltd

2004-2 - 2005-3 · 1 yr 2 mos

head of it security and compliance - emea

tyco

2007-10 - 2014-6 · 6 yrs 9 mos

* Regional Leader, responsible for shaping the strategic direction and oversight of the Information Security and IT Compliance functions throughout EMEA (27 countries) in a high profile role, reporting directly to the CIO. * Orchestrated the 'IT Controls Management Testing Programme' for SOX (Sarbanes Oxley). * Created and enforced global ‘IT Security’ and ‘Acceptable Use Policy’ and security standards portfolio. * Integral in establishing a global team to cultivate the 'Security Architecture Roadmap' and supporting security standards suite. * Embedded a culture of proactive approaches to Risk Assessment, Vulnerability Management, and the adoption of best practices in IT Security methodologies. * Regional lead for all EU and UK data protection, retention and privacy issues, relating to technology, in conjunction with Regional Counsel.

head of it controls - europe

tyco fire & integrated solutions (uk) ltd

2005-3 - 2007-10 · 2 yrs 8 mos

* Responsible for developing IT process mapping and design of SOx controls * Created test plans and performed audits and reviews in the UK and across Europe * Developed and implemented a standard ITIL based change management process and policy * Trained the service desk team in developing work-flow processes using ‘Track-It’ service desk application in support of SOx * Built and documented process diagrams during global transition of shared service environments from HP to IBM, working closely with U.S. service delivery management team * Organised and maintained disaster recovery plans for IT * Performed self-assessment reviews in accordance with U.S. compliance directives * Trained IT staff in compliance testing requirements * User Access Reviews (Segregation of Duties) * Developed Starters/leavers process and asset management policy which contributed in the recovery of company equipment and cost reductions

it security manager

wates group

2017-9 - Present · 9 yrs 1 mo

head of information security and compliance - emea

john wiley and sons

2015-3 - 2017-9 · 2 yrs 7 mos

* Restructured the global IT Controls Framework in compliance with the COBIT governance model, resulting in a 60% reduction of redundant controls. * Spear-headed the creation, implementation and maintenance of the enterprise Information Security Policy and Standards Portfolio. * Introduced security assessments into the procurement process, to facilitate due diligence and compliance requirements, during potential acquisitions and third-party partnership negotiations.