Role Play Games
Theatre
Travel
Dining
Reading
Pete Smith
Rochester,Kent
Summary
Experienced CISO with proven expertise in strengthening organizational cybersecurity posture. Skilled in guiding cross-functional teams to establish comprehensive security frameworks, minimizing risks and ensuring adherence to regulatory standards. Emphasis on proactive threat hunting and incident response, crafting resilient cybersecurity strategies.
Overview
17
17
years of professional experience
1
1
Certification
Work History
Head of Security (Lead Security Consultant) Head o
Datapharm Ltd
Leatherhead, Surrey
11.2025 - Current
- Conducted ISO 27001 gap analysis and prioritized remediation actions based on findings.
- Executed independent security reviews of policies, processes, controls, and infrastructure to identify vulnerabilities.
- Developed practical ISO 27001 roadmap with timelines, owners, and priorities for accreditation readiness.
- Facilitated workshops and training sessions on cybersecurity best practices for all staff levels.
- Advised on implementation of required controls, evidence collection, and documentation standards.
- Provided hands-on support to internal IT teams to mitigate risks and ensure roadmap completion.
- Strengthened supplier and third-party risk controls and governance frameworks.
- Produced and presented executive-level findings and strategic recommendations to stakeholders.
Founder - Chief Security Consultant
GuardianSmith CyberSecurity Ltd
Rochester, Kent
01.2025 - Current
- Founded GuardianSmith CyberSecurity Ltd, providing specialized cybersecurity services to protect organizations from cyber threats.
- Performed comprehensive security assessments and audits, identifying critical vulnerabilities.
- Designed strategic security plans to align with compliance requirements and business objectives.
- Led incident response initiatives, ensuring swift recovery from cyber incidents.
- Integrated advanced security measures into existing infrastructures for enhanced protection.
- Trained employees on cybersecurity protocols to reduce risks of human error.
- Oversaw continuous threat monitoring, enabling timely responses to emerging threats.
- Managed ongoing security services for sustained defense against cyber risks.
- Provided tailored data protection solutions with detailed reports for stakeholders.
Head of Information Security
IFX Payments
London
03.2025 - 10.2025
- Crafted strategic long-term security roadmap covering network, cloud, and application domains.
- Engineered compliance maturity framework compliant with ISO 27001, NIST, GDPR, DORA, and SOC 2.
- Embedded security protocols within enterprise architecture and DevSecOps workflows.
- Rolled out Threat Intelligence Programme alongside improved business continuity and disaster recovery strategies.
- Advanced proactive detection capabilities via AI-driven analytics for increased resilience.
- Bolstered organizational security culture by establishing clear KPIs and KRIs.
CISO
Allica Bank
London
07.2021 - 01.2025
- Established cyber security function growth from 2 to 13 personnel through strategic hiring in GRC and operations.
- Liaised with senior management to report on security status and advise on strategic decisions.
- Crafted and implemented enterprise security strategy aligned with regulatory mandates.
- Led compliance efforts for ISO 27001, PCI-DSS, SWIFT, and PRA/FCA frameworks.
- Set up continuous monitoring tools including SOC, CSPM, DLP, and phishing simulations.
- Oversaw major IAM upgrades featuring SSO integration via Entra ID and PAM solutions.
- Advanced application security projects such as Bug Bounty initiatives and Threat Intelligence development.
- Updated Risk & Control Self-Assessment framework to enhance understanding of risk posture.
- Maintained up-to-date knowledge of legal and regulatory changes affecting security practices.
- Reviewed and updated access permissions and security clearances for staff to maintain strict access control.
- Delivered regular training sessions on security awareness and best practices to all staff members.
- Negotiated contracts with security vendors, ensuring cost-effective procurement of high-quality services and equipment.
- Analysed incident reports and surveillance footage to identify patterns and prevent recurrences.
Information System Security Manager
WorldFirst
London
02.2020 - 07.2021
- Managed Information Security team through recruitment, training initiatives, and performance assessments.
- Delivered successful O365 MFA rollout alongside AWS migration, SIEM deployment, and PCI recertification.
- Introduced comprehensive vulnerability scanning, encryption review processes, and data loss prevention strategies.
Network and Security Architect
Hogarth Worldwide
London
03.2017 - 02.2020
- Developed comprehensive global security architecture across more than 50 offices and cloud platforms.
- Implemented significant improvements in 802.1X NAC, endpoint detection, and encryption solutions.
- Monitored network traffic for suspicious activity to prevent cyberattacks and data breaches.
- Managed firewalls, antivirus systems, and other security tools to safeguard information assets.
- Analysed security alerts and provided recommendations for enhancing system security.
- Audited networks and security systems to identify vulnerabilities.
- Liaised with external security vendors to evaluate and integrate new security solutions.
- Controlled user access to minimise security risks and track activities.
- Updated virus protection systems based on computer virus reports.
- Protected secure data files and regulated access.
- Designed, implemented and maintained security systems and controls.
- Built firewalls and encrypted data to secure confidential information from potential intrusion.
- Collaborated with IT departments to update security software and patch vulnerable systems.
- Designed and implemented plans to secure computer files against breach, destruction or accidental modification.
- Trained staff on cybersecurity best practices to raise awareness and prevent data loss.
- Reviewed and updated disaster recovery plans to ensure business continuity in the event of an attack.
Senior Network and Security Engineer
Edge Technology Group
London
05.2016 - 03.2017
- Guided network and security project implementations for financial and enterprise clients.
- Diagnosed and resolved complex network problems.
- Collaborated with IT teams to troubleshoot complex network issues, resulting in decreased downtime and increased user satisfaction.
- Configured routers, switches, and firewalls for optimal security and connectivity across multiple sites.
- Managed network performance and implemented changes to improve efficiency.
- Monitored, analysed and reconfigured network environments to accommodate future scalability and improve performance.
- Maintained hardware and software for networks and assisted in installation and upgrade of servers.
- Diagnosed errors, failures and bottlenecks using software tools.
- Offered technical knowledge and specialised skill set to troubleshoot critical network problems.
- Maintained communication with colleagues to promote knowledge sharing and project collaboration.
- Optimised network infrastructure for flawless performance.
- Managed and monitored network performance, identifying bottlenecks and deploying solutions to enhance efficiency.
- Configured new and upgraded networks to meet internal requirements.
- Serviced and maintained networks, ensuring optimised performance and function to meet customer needs.
- Collaborated with other teams to support new network installation and provide cross-functional solutions
- Engineered and implemented technology solutions to support network systems, software and hardware for businesses.
Network and Security Architect
IBM
London
03.2015 - 05.2016
- Unified infrastructure across global business units to enhance operational efficiency.
- Monitored network traffic for suspicious activity to prevent cyberattacks and data breaches.
- Managed incident response activities, including investigation and reporting of security breaches.
- Managed firewalls, antivirus systems, and other security tools to safeguard information assets.
- Analysed security alerts and provided recommendations for enhancing system security.
- Audited networks and security systems to identify vulnerabilities.
- Liaised with external security vendors to evaluate and integrate new security solutions.
- Controlled user access to minimise security risks and track activities.
- Implemented security measures to protect systems from malware, phishing, and other cyber threats.
- Updated virus protection systems based on computer virus reports.
- Protected secure data files and regulated access.
- Analysed system risk to identify and implement appropriate security countermeasures.
- Designed, implemented and maintained security systems and controls.
- Built firewalls and encrypted data to secure confidential information from potential intrusion.
- Performed regular maintenance and support during out-of-hours to maintain service continuity.
- Managed large-scale WAN and network security programs to protect sensitive data.
Group Network and Security Infrastructure Manager
Hogarth Worldwide
London
01.2012 - 03.2015
- Expanded global networking from six to 40 sites, enhancing connectivity.
- Demonstrated outstanding technical troubleshooting skills, identifying problems promptly and precisely.
- Used exceptional planning and prioritisation skills to manage and resolve high volumes of incident tickets.
- Used remote access software to help fault-find and solve computer malfunctions virtually.
- Attended emergency call-outs at short notice to provide tech support or fix software, systems or device malfunctions.
- Managed the configuration and installation of IT hardware and software, ensuring seamless integration into existing systems.
- Utilised exceptional communication skills to explain complex technical concepts to non-technical service users.
- Diagnosed and resolved technical issues for clients via phone, email, and remote access, enhancing customer satisfaction.
- Delivered secure data centers and remote access solutions to ensure data integrity.
Implemented monitoring solutions for improved operational oversight.
Network and Security Engineer
Sohonet
London
07.2009 - 01.2012
- Executed new installations and managed firewall maintenance for optimal security.
- Collaborated with IT teams to troubleshoot complex network issues, resulting in decreased downtime and increased user satisfaction.
- Configured routers, switches, and firewalls for optimal security and connectivity across multiple sites.
- Managed network performance and implemented changes to improve efficiency.
- Diagnosed errors, failures and bottlenecks using software tools.
- Engineered and implemented technology solutions to support network systems, software and hardware for businesses.
- Utilised network management software for real-time monitoring, alerting, and reporting, enhancing operational awareness.
- Communicated with customers to deliver clear, helpful advice to technical and non-technical users.
- Tested new network technologies, aiding strategic network improvements and upgrades.
- Reviewed system logs to identify performance inefficiencies and implement appropriate solutions.
- Handled support tickets to resolve issues promptly and effectively.
- Installed and configured Linux servers, ensuring reliable performance.
- Administered server management through Puppet for automated configuration.
Education
Higher National Diploma - Open Studies (Technology based)
Open University UK
Remote2012
Skills
Cybersecurity and Risk Management
- Enterprise risk assessment and risk management
- Incident response and crisis management
- Vulnerability assessment and vulnerability management
- Threat intelligence, and threat intelligence analysis
- Third-party and supply chain risk management
- Contingency planning and business resilience
- Continuous security monitoring and performance measurement
- Compliance auditing and regulatory compliance
- Security audits and assurance activities
- Compliance frameworks (eg, ISO 27001, NIST, GDPR)
- Security governance and policy enforcement
- Data protection and privacy management
- Cybersecurity strategy development and execution
- Security architecture design and oversight
- Network security and network monitoring tools
- Technical troubleshooting and network diagnostics
- Vulnerability and network assessments
- Cybersecurity leadership and team management
- Security resource allocation and budget oversight
- Strategic planning and roadmap development
- Project and programme management
- Stakeholder engagement and executive collaboration
- Board‑level reporting and presentations
- Stakeholder and cross‑functional communication
- Technical and non‑technical communication
- Written and verbal communication excellence
- Security awareness and training delivery
- Decision‑making under pressure
- Composure in highbimpact incidents
- Critical thinking and problem solving
- Active listening and cultural awareness
- Time management and self-motivation
Certification
IAPP: AI Governance Professional (AIGP)
PECB: Data Protection Officer (CDPO)
ISC2: Certified Cloud Security Professional (CCSP)
ISC2: Certified Information Systems Security Professional (CISSP)
ISASC: Certified Information Security Manager (CISM)
Interests
Website
https://guardiansmith.com/
- https://www.linkedin.com/in/peter-andrew-smith/
- https://www.linkedin.com/company/108939611/admin/dashboard/
Timeline
Head of Security (Lead Security Consultant) Head o
Datapharm Ltd
11.2025 - Current
Head of Information Security
IFX Payments
03.2025 - 10.2025
Founder - Chief Security Consultant
GuardianSmith CyberSecurity Ltd
01.2025 - Current
CISO
Allica Bank
07.2021 - 01.2025
Information System Security Manager
WorldFirst
02.2020 - 07.2021
Network and Security Architect
Hogarth Worldwide
03.2017 - 02.2020
Senior Network and Security Engineer
Edge Technology Group
05.2016 - 03.2017
Network and Security Architect
IBM
03.2015 - 05.2016
Group Network and Security Infrastructure Manager
Hogarth Worldwide
01.2012 - 03.2015
Network and Security Engineer
Sohonet
07.2009 - 01.2012
Higher National Diploma - Open Studies (Technology based)
Open University UK