Adrian M

Senior Information Security Manager @Rock Insurance Group

Crawley, GB

Dedicated Information Security Manager, developing and maintaining the Information Security Management Systems (ISMS) compliant with ISO 27001:2022 standards and also ensuring compliance with PCI DSS 4.0. Managing the entire end to end security processes, implementing new security monitoring tools, conducting thorough internal audits, and collaborating closely with various departments to ensure strong systems and data protection.Responsibilities Include:• Building relationships with key internal stakeholders, promoting alignment with organisational values, and enhancing the overall security posture.• Working closely with Risk & Compliance and IT departments to ensure comprehensive data protection across all systems and processes.• Leading the implementation of new security tools, such as SOC & SIEM and PAM enhancing the organisation\'s ability to detect, prevent, and respond to security threats effectively.• Identifying and reporting on information security risks, providing actionable insights to senior management.• Ongoing development and maintenance of an Information Security Management System (ISMS) in compliance with ISO 27001:2022 standards.• Developing compliance controls with PCI DSS 4.0 standards, managing audits, and implementing necessary controls to protect payment card data.• Conducting comprehensive internal security audits and assessments to identify potential vulnerabilities and ensure adherence to security controls.• Developing, implemented, and maintenance of rigorous information security policies and procedures to safeguard organisational data.• Developing and implemented security training and awareness programmes to educate employees on best practices and foster a security conscious culture.

De Montfort University

Computer Science

De Montfort University

Computer Science