George Abraham

As CISO at Frontier Software, I drove cybersecurity risk management and security awareness to enhance the company’s security posture and proactively mitigate cyber threats. Key Achievements: • Drove a security awareness training program, resulting in a significant reduction in phishing test click rates. • Established the 'Cybersecurity – IT Operations' stand-up meeting, improving collaboration and risk management across teams to proactively address operational security challenges.

At the Novatti Group, I reported directly to the CEO and was responsible for developing, implementing, and managing enterprise-wide cybersecurity strategies to protect the company’s information assets, systems, and networks. Key achievements: • Designed and executed a multi-year cybersecurity strategy to strengthen security posture. • Led the company to its first-ever ISO 27001:2013 certification, ensuring compliance with global security standards. • Established a risk-driven security framework, aligning cybersecurity with business objectives.

As the Head of Cybersecurity, I Led the cybersecurity strategy to enhance the security posture of both Corporate IT and Operational Technology (OT) environments. My focus was on delivering a security framework that reduced strategic cybersecurity risks to the company’s risk appetite. I provided quarterly updates to the Executive Team and Board of Directors, ensuring alignment between cybersecurity initiatives and business objectives. Key Achievements: • Established Victoria’s first OT Security Operations Centre (SOC) to protect critical water infrastructure for Melbournians. • Developed and implemented an Information Security Management Framework aligned with the VPDSS and ISO 27001. • Strengthened endpoint and email security by deploying advanced Endpoint Detection and Response (EDR) and Threat Hunting capabilities.

As Head of Risk at SecurePay (Australia Post Group), I was part of the Senior Leadership Team, responsible for implementing data security standards and best practices to protect the business from vulnerabilities, risks, and data breaches. My focus was on compliance, risk mitigation, and strengthening security controls across critical payment systems. Key Achievements: • Led a major security transformation, making the environment PCI DSS compliant, preventing potential fines and reputational damage. • Achieved ISO 27001:2013 certification for SecurePay and POLi Payments, enhancing security governance. • Reversed a non-compliance trend, securing PCI DSS Attestation of Compliance (AoC).

As a Penetration Tester and Security Auditor (PCI DSS and ISO 27001), I specialized in proactive risk mitigation, regulatory compliance, and the implementation of secure technologies to safeguard critical systems and sensitive data across diverse industries. Key Projects: • Led the penetration testing for Victorian Government agency’s external and internal networks, and web applications; proposed solutions were embraced by senior management and integrated into the annual security plan. • Designed security controls for a large Health Insurance provider to facilitate a digital transformation project. Used defence-in-depth model and incorporated security design reviews, secure code reviews, and penetration testing into the software development lifecycle (SDLC).

In this role, I identified security gaps in information systems and networks, providing strategic recommendations to safeguard the Victoria Police force and citizens from cyber threats, breaches, and other risks. I advised on security processes and protocols to ensure compliance with the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM), reinforcing a robust security posture against evolving threats.

As a Security Specialist, I oversaw IT security operations to safeguard and support the company’s managed service customers. I leveraged a diverse range of security tools to execute end-to-end projects, conducting security assessments, overseeing system upgrades, and managing the daily administration of vulnerability and threat management systems.

As a Security Administrator at Dimension Data, I implemented strategic security initiatives to position the company as a leader in cybersecurity, ensuring robust protection for servers, networks, hardware, and software against both current and emerging threats.