Richard Lennon
Newtownards,Ards and North Down
Summary
Dynamic and influential technology executive with 15+ years of leadership experience, with deep roots in cybersecurity and security operations. Proven track record as a CISO-level leader delivering secure, resilient, and high-performing technology environments while guiding enterprise-wide data and digital modernisation, including cloud-native architectures, governance frameworks, and high-level AI strategy.
Known for unifying cybersecurity, IT operations, data, and AI into a cohesive technology ecosystem that strengthens organisational resilience, supports innovation, and enables confident, data-informed decision-making. Adept at aligning security and risk management with business objectives, ensuring regulatory compliance, and building a culture of security across complex, global environments.
Overview
23
23
years of professional experience
Work history
CISO\Head of Technology Operations ( Dual Role)
Alexander Mann Solutions
Belfast
2015.04 - Current
- Led development of comprehensive technology strategies to enhance operational efficiency.
- Oversaw implementation of robust cybersecurity protocols to protect organisational assets.
- Directed cross-functional teams to align technology initiatives with business objectives.
- Cultivated relationships with key stakeholders to foster collaboration on technology projects.
- Managed risk assessments and developed mitigation plans to address potential vulnerabilities.
- Coordinated responses to security incidents, ensuring minimal disruption to operations.
- Liaised with regulatory bodies to maintain compliance with data privacy laws and guidelines.
- Established a disaster recovery plan for business continuity during unforeseen situations.
- Led the development of secure coding practices resulting in fewer vulnerabilities in software applications.
- Provided strategic guidance on enterprise-wide risk management matters ensuring better preparedness against potential risks.
- Implemented robust security protocols to mitigate cyber threats.
- Conducted regular audits of information systems to ensure adherence to established standards.
- Reviewed and updated existing company security policies for improved compliance with regulations.
- Oversaw penetration testing activities for early detection and remediation of vulnerabilities.
- Maintained up-to-date knowledge of current industry trends in cybersecurity thereby aligning organization's security infrastructure accordingly.
- Created effective framework for managing user access controls, ensuring authorised access only to sensitive data and resources.
- Collaborated with IT teams for seamless integration of cybersecurity measures in system architecture.
- Formulated risk management strategies, reducing potential vulnerabilities and threats.
- Tested security measures and systems, performing risk assessments to detect vulnerabilities.
IT Director
Regus
Belfast
2002.10 - 2015.04
- Led strategic IT initiatives to enhance organisational efficiency and operational effectiveness.
- Developed and implemented IT policies and procedures to ensure compliance with industry standards.
- Collaborated with cross-functional teams to identify and address technology-related challenges.
- Managed vendor relationships to optimise service delivery and support for IT systems.
- Evaluated emerging technologies to recommend solutions that align with business objectives.
- Oversaw IT budget planning and resource allocation to maximise operational performance.
- Coordinated IT projects from conception to implementation, ensuring timely delivery and quality outcomes.
- Oversaw software development lifecycle, ensuring timely product delivery.
- Developed comprehensive IT strategies that aligned with organisational goals.
Skills
- Cybersecurity Leadership & Strategy
- Security Operations & Incident Response
- Risk Management & Regulatory Compliance
- Identity, Access & Zero Trust Security
- Cloud & Enterprise Security Architecture
- Data Security, Privacy & Governance
- Vendor, Third-Party & Supply Chain Risk Management
- Executive Communication & Board Reporting
Accomplishments
- Delivered a multi-year cybersecurity transformation programme, increasing security maturity and reducing critical vulnerabilities
- Implemented a Zero Trust security model across identity, devices, and applications, significantly strengthening authentication and access controls.
- Established a 24/7 security operations model with improved tooling and processes.
- Led successful responses to major security incidents, achieving rapid recovery with no operational disruption or data loss.
- Built an enterprise-wide risk management and governance framework aligned to NIST/ISO standards, reducing regulatory findings.
- Achieved full compliance with key regulatory requirements (e.g., GDPR, PCI-DSS, SOX) with zero critical audit issues.
- Designed and embedded secure cloud and enterprise architecture, supporting the migration of critical systems while reducing cloud security incidents.
- Introduced data governance and protection controls (classification, DLP, encryption), improving visibility and reducing data access risks.
- Modernised security operations technology stack (SIEM, EDR, SOAR), increasing detection accuracy and reducing false positives.
- Launched a third-party security risk programme that reduced supplier-related risk exposure.
- Negotiated major security technology contracts, achieving £X in annual savings or cost avoidance.
- Built and led high-performing, multi-regional security teams, improving retention and team capability.
- Delivered enterprise-wide security awareness initiatives, lowering phishing click-through rates.
- Embedded security-by-design into digital and cloud initiatives, reducing security exceptions and rework.
- Delivery of a Cyber Security, Data and Tech Ops strategy that aligns to SOC2 Type 2 and ISO27001\42001.
Timeline
CISO\Head of Technology Operations ( Dual Role)
Alexander Mann Solutions
2015.04 - Current
IT Director
Regus
2002.10 - 2015.04