I am an outgoing and career-driven cybersecurity professional, with almost 4 years of experience in cybersecurity. I currently work in a penetration testing operations role, specialising in vendor management. I also have experience in information security management and on the JPMC cyber security service desk. I have experience dealing with customers and vendor teams and am very comfortable leading projects and presentations. I have just completed my bachelor's (Hons) in Digital and Technology Solutions (specialism in Cyber Security) with the University of Exeter, where I studied Python, SQL, Penetration testing, and Advanced Cyber Security practices and techniques.
Overview
4
4
years of professional experience
10
10
years of post-secondary education
Work History
JP Morgan Chase
05.2022 - Current
Led the vendor stream which meant that I worked with the service partner teams to organise penetration testing
I also work to improve vendor operations, identify gaps in processes, resolve issues ion in flight test engagements and complete invoices from the vendors
I hold regular meetings with them and am very comfortable leading meetings and presentations
I have developed and maintained Tableau dashboards to monitor vendor operations, providing insightful analytics and operational transparency
This has allowed us to improve overall vendor operations and the data is being used in senior management meetings to make strategic decisions on the vendor operations
Working with customer application teams to triage and book their penetration tests with internal or vendor testing teams
Each case must be analysed for when they require an annual test and if the application is eligible based on JPMC guidelines
I work with the customers to resolve any issues with the request and help them along the full test lifecycle
This part of my role requires extensive interpersonal skills
I must carefully negotiate with the application teams and vendors to try and fit the test into the schedule while adhering to the customer's request
I completed vendor training and reporting
This involves me training new vendor operations staff in how to use the JPMC tools required for their role
I complete monthly reporting on the vendors including their operational QA reported on the dashboards I developed, I also report on several key KPIs that are audit impacting for my team
Worked with the finance team to rework how we do vendor invoicing which has led to a much easier process for all parties
We have reduced the number of errors in invoicing and have been able to reduce the time taken for the vendors to be paid
Information Security Management
05.2021 - 05.2022
I led a data analytics project on software escrows that the firm has
I analysed the effectiveness of the escrows and how likely they were to pass a test of the escrow
Reporting on the findings secured funding from cyber leadership to test the hypothesis which led to significant changes in processes
Co-lead an important technology development audit and worked with the lead line of business owners to organise responses to RFIs
My responsibilities included running daily and weekly touchpoints with stakeholders and having direct contact with application teams in order to find evidence to respond to the audit RFIs
Worked on assisting application owners in onboarding to the public cloud securely
I also worked with the VM team to resolve vulnerabilities found on the public cloud
Completed data analysis work to aid in resolving vulnerabilities like log4j on applications within the firm
Outcomes lead to a large reduction in such vulnerabilities.
Cyber Security Service Desk
09.2020 - 05.2021
This is the first role I worked in JPMC and I learned the basics and learnt the cyber security culture of the organisation
Engage directly with clients to resolve their cyber-related challenges, ensuring their needs are met precisely and efficiently
Focus on enhancing team workflows, implementing processes that boost productivity and streamline processes
At this stage I worked hard on figuring out the balance between university and working simultaneously
Collaborated in an Agile environment, utilising JIRA for sprint planning and execution, which enhanced team productivity and project management efficiency
Worked on a capacity analysis and published results to senior management this helped the team gain more budget as we did not have the current capacity to deal with the number of tickets the team was handling.
Education
Digital Technology Solutions - Security
University of Exeter
01.2020 - 01.2024
SPECIALISED - CYBER SECURITY
The High School of Glasgow
01.2014 - 01.2020
Skills
National 5s 7A’s & B including A in both Maths and EnglishHighers 5A’s & B including A in Maths and EnglishAdvanced Higher Computing and Maths both B