ELIZABETH HANKINS
Summary
Seasoned IT security professional focused on safeguarding organisational data and systems. Capable of developing comprehensive security strategies and implementing robust solutions to mitigate cyber threats. Skilled in gaining business buy-in, with a collaberative approach to leading teams, managing security operations, and ensuring compliance with industry standards.
Overview
24
24
years of professional experience
3
3
years of post-secondary education
1
1
Certification
Work history
Head of IT Security
Osborne Clarke
London
01.2025 - Current
- Established Vulnerability Management Board to enhance control and remediation of IT vulnerabilities.
- Developed international IT Risk register and committee to assess and manage cyber risks.
- Formed IAM team to improve identity and access management across global organisation.
- Executed development and implementation of IT security strategies to safeguard sensitive data.
- Collaborated with cross-functional teams to uphold compliance with industry regulations in IT security.
- Designed training programmes to elevate cybersecurity awareness and encourage safe practices.
- Created incident response protocols for rapid resolution of security breaches, minimising operational impact.
- Drafted policies to govern data protection practices, ensuring organisational adherence.
Head of Security
Miller Insurance
London
07.2021 - 01.2025
- Ensured compliance with regulatory requirements for 12 international offices, including FCA, MAS, BMI, GDPR, DORA, and FCA Operational Resilience.
- Worked with a cross-functional team for FCA Operational Resilience, and with various European entities for DORA compliance.
- Developed and matured Incident Response policies and playbooks for effective security threat detection and incident handling, leading to a 70% decrease in incident response time, enhancing security monitoring and incident response capabilities.
- Performed an ISO27001 gap analysis and created a roadmap to compliance which will be fully implemented by Q4 2024.
- Implemented a comprehensive security awareness and training program across the organisation, leading to a 60% reduction in phishing attacks.
- Achieved zero data breaches in 3 consecutive years by implementing comprehensive security measures.
- Spearheaded the establishment of a cybersecurity team covering recruitment, training, and development of all information security policies and procedures.
- Managed the selection and operationalisation of an outsourced SOC, increasing incident response efficiency, establishing a 24/7 coverage.
- Moved the company to a threat-based security model, focussed on strengthening our critical areas of vulnerability.
Security Assurance Manager
Legal and General
Brighton & Hove
01.2018 - 07.2021
- Assisted in the preparation and presentation of assurance reports to senior stakeholders, facilitating clear understanding of key security risks, by defining assurance schedules, metrics, and key risk indicators.
- Provided assurance to the Business Units and board on the cybersecurity posture of the business, while working with Cybersecurity Operations teams to ensure business needs were met.
- Conducted meticulous quality assurance reviews of control testing papers and final reports to ensure compliance with policies and standards.
- Responded to FCA and PRA regulations and requirements (including CBEST findings).
- Coordinated responses to internal and external audits, serving as a single point of contact for security-related inquiries.
- Managed Data Loss Prevention reporting and coordinated initial investigations of DLP alerts, liaising with relevant stakeholders for further actions.
- Provided leadership within the Security Management and Assurance team, guiding and training team members to achieve strategic objectives consistently.
IT Security / Service Desk Senior Analyst
Mizuho Bank
London
07.2015 - 12.2017
- Created, maintained and deleted user accounts within defined approval guidelines.
- Coached and trained junior members of staff, including doing half-yearly appraisals and reviews.
- Assisted with audit compliance and reconciliation.
- Ensured Access Management services were delivered to defined SLA/OLAS for all aspects of technology delivery.
IT User Support Specialist
Kirkland & Ellis International LLP
London
07.2013 - 07.2015
- Performed first and second level support (reporting, diagnosing and resolving) for all IT issues for the London office.
- Set up of meeting rooms; VC & Web Conferencing, laptop, telephones as required.
- Windows 7 Rollout.
Service Desk Analyst (Contractor Role)
Deloitte LLP
Milton Keynes
05.2013 - 07.2013
Service Desk Analyst (Contractor Role)
Marsh & McLennan Companies
Milton Keynes
12.2012 - 05.2013
IT Security Administration Supervisor / Helpdesk Team Lead
Chubb Insurance Company of Europe
London
09.2001 - 06.2012
Education
Diploma of Higher Education - Computing Science
University of Greenwich
London 09.1995 - 06.1998
Skills
- Security policy development
- Incident response planning
- DR / BCP
- ISO27001
- Cyber Essentials
- DORA Risk Management
- Data Privacy
- GDPR Regulations
- Budget control and allocation
- Prioritising under pressure
- Delivering on strategic outcomes
Certification
- CISSP - certified information systems security professional
- Corndel Diploma in Management - CMI
- CISMP - Certificate in Information Security Management Principles
- Prince 2 project management - practitioner level
Founder
Women in Tech Network
I set up and lead the Women in Tech network for Legal and General, including arranging a launch event attended by over 500 staff, various training and fireside events, and performing outreach to local schools to encourage more girls to consider careers in STEM.
Affiliations
- Padel
- Netball
- Music
- Hiking
Timeline
Head of IT Security
Osborne Clarke
01.2025 - Current
Head of Security
Miller Insurance
07.2021 - 01.2025
Security Assurance Manager
Legal and General
01.2018 - 07.2021
IT Security / Service Desk Senior Analyst
Mizuho Bank
07.2015 - 12.2017
IT User Support Specialist
Kirkland & Ellis International LLP
07.2013 - 07.2015
Service Desk Analyst (Contractor Role)
Deloitte LLP
05.2013 - 07.2013
Service Desk Analyst (Contractor Role)
Marsh & McLennan Companies
12.2012 - 05.2013
IT Security Administration Supervisor / Helpdesk Team Lead
Chubb Insurance Company of Europe
09.2001 - 06.2012
Diploma of Higher Education - Computing Science
University of Greenwich
09.1995 - 06.1998