Paul Griffiths

Chief Information Security Officer @ Delinian

About

I am an established Chief Information Security Officer (CISO) who combines running global teams in information security as well as risk management. I partner with the Business, Compliance and Audit to setup large global risk programs to manage risk in accordance with the Business / Firms appetite. I have +25 years’ experience across information security and risk management I bring a broad network of industry contacts who can be used as the first point of contact in the event of an information security incident. I have an authentic and inclusive leadership style and have built and lead globally dispersed security teams for both American and UK based organisations. I have demonstrated success in securing funding to build the team, implement large security projects and maintain the team’s budget.

Country

United Kingdom

City

London Area

Industry

Financial Services

Skill

Information Security Management, IT Risk, Security Management, Computer Security, IT Governance, Solution Design, Security, Risk, IDS, Risk Management, Risk Assessment, Security Policy, Network Security, Data Security, Vulnerability Management, Compliance Management, Enterprise Risk Management, Security Audits, Infrastructure Security, Program Management

Experience

Chief Information Security Officer

Delinian

2022-4 - Present · 4 yrs 6 mos

City of London, England, United Kingdom

Led the Group Information Security and Risk team of 20 employees. Transformed an established security engineering team to form a new security program with teams focussed on Security Operations, Security Architecture and Governance Risk and Control. Reporting to the CIO. Set strategic direction of the Information Security and Risk teams. Executive Sponsor for the IT Risk committee. Presented regular updates to the operating committee and board.

Chief Information Security Officer

S&P Global

2021-5 - 2022-4 · 1 yr

London, England, United Kingdom

Led the Global Information Security program and team of 62 employees and 47 Wipro staff with a budget of $35m. Provided direct reports managerial duties such as goal setting, performance evaluation, expense review and escalations. Initially reporting to the CRO and latterly the CIO. Flexible in reporting styles.

Global Head of Security Architecture

S&P Global

2019-4 - 2021-5 · 2 yrs 2 mos

London, United Kingdom

Led the security Architecture program and a global team of 12 people. Created the strategic direction for the Security Architecture program and team. Led the Identity and Access Management team in addition to the Security Architecture team for 6 months following the departure of the team leader. This was a global team of 24 people.

Executive Director, Technology Information Risk

Morgan Stanley

2011-10 - 2019-3 · 7 yrs 6 mos

Managed global team of 7 Risk Officers. Partnered with technology and business senior management to help them to understand and manage security risk. Integrated key security controls into the workflow and leveraged automation to drive efficiency and accuracy. First point of contact for all risk assessment teams within the organisation (Internal Audit, Operational Risk, Compliance and Technology). Part of senior management team both regionally and functionally.

Executive Director, Technology Risk

Goldman Sachs

1997-6 - 2011-10 · 14 yrs 5 mos

London, United Kingdom

Managed global team of 28 security engineers with a budget of $10m+. Managed Security Data Analytics, Data Security, Endpoint Security, Security Operations Tooling and Security automation engineering teams. Developed infrastructure and application policies and standards framework working closely with the infrastructure and application development stakeholders, the core policy team and industry experts through CIS.