Dave H.
Vulnerability Management and Remediation Manager @Capital One
Signup · Get unlimited contacts
WORK HISTORY
Vulnerability Management and Remediation Manager @Capital One
UK client engagement lead in the area of vulnerability and remediation management.Ensuring vulnerabilities are contextualized for Capital One UK systems to ensure the higher risk services and data are prioritised and risk reduction activities are carried out.Working as the intermediatory between Enterprise security testing teams and UK business teams around infrastructure, container, SAST, DAST and SCA findings.Working with remediation teams in identifying appropriate schedules to identify vulnerabilities that are not resolved as part of the automated processes such as patching for operating systems, or AMI rehydration, and defining adequate processes and activities are followed and auditableWorking with other stakeholders in the business risk area to appropriately assess the risk for vulnerabilities that are not going to be remediated and ensure they are identified, reviewed, and well managed though the life cycle of the platform or applicationEnsure vulnerabilities aligned with the UK’s tech debt are regularly identified, assessed, and entered in the risk management process to ensure appropriate responses, schedules and management of end-of-life systems are maintainedMaking use of the data from various scan tools such as Qualys, AquaSec, MEND, CheckMarx, Data Theorum as well as enterprise asset systems such as Service NowResponsible for UK centered reporting, engaging with all stakeholders to ‘tell the story’ and identify areas that need additional focus within the period.Generate reports and focussed metrics for UK responses to regulators and leadership teams with a focus on continual improvements to the solutions and processes in place.Making use of python or sql to pull out data from data warehouses such as Snowflake to prepare focused data sets to then enable remediation teams to focus on specific activities.
EDUCATION
University of Derby
Master of Science , Cyber Security
Coventry Technical College
Higher National Certificate, Telecommunications Engineering
Bath College
Level 2 Certificate in Understanding Autism
ABOUT DAVE H.
An innovative, versatile and highly experienced Information Security professional who offers a sound grasp of Enterprise Security requirements and Business risk within the Vulnerability Management space together with a sound grasp of customers service operations requirements. Having worked extensively with both Emergency and Financial service providers amongst others for the governance and oversight of information systems. An excellent understanding of business requirements and the ability to articulate operational and security needs to various audiences.An excellent problem solver who often sees solutions others may not with ability to distil complex ideas into clear, actionable content to ensure engineering teams understand what is required and work for the best solutions for all stakeholders.Able to move seamlessly between long term planning and tactical work; can drive tactical results while planning and scoping for highest leverage impact and can step into grey spaces and works with others to identify future solutions.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.