Steven Laffan
Head of Cyber Security (Operations, Iam & Cloud Security) @OSB Group
Signup · Get unlimited contacts
WORK HISTORY
Head of Cyber Security (Operations, Iam & Cloud Security) @OSB Group
Lead and mature all aspects of cyber and operational security across a FTSE 250 financial services organisation, covering security operations, IAM, vulnerability management, cloud security.• Lead global security operations including threat detection, SIEM, and incident response, delivering a 60% reduction in security incidents • Own identity and access management (IAM) including lifecycle processes (JML), access reviews and privileged access controls • Deliver enterprise vulnerability management programme, reducing exploitable vulnerabilities by 58% through risk-based prioritisation • Drive secure adoption of Azure cloud services, championing cybersecurity tooling across cloud and on-prem environments • Full engagement in security governance and compliance across ISO 27001, SOC 2, PCI and GDPR • Provide executive-level reporting on security posture, risks and KPIs • Lead and develop multi-region teams across the UK and APAC
SKILLS
ABOUT STEVEN LAFFAN
Change is constant, and I thrive at the intersection of cybersecurity and business. With 20+ years of experience, I excel in creating adaptable cybersecurity strategies, fostering collaborative cultures, and breaking down silos between technology teams to enable seamless integration.As a results-driven leader, I specialize in driving innovation, mitigating cybersecurity risks, and crafting technology roadmaps that align with organizational risk appetites while addressing evolving threats. Known for being a highly visible and pragmatic leader, I empower and mobilize cybersecurity teams to enhance organizational resilience.I leverage a collaborative approach, working closely with clients, business leaders, technology teams, and key stakeholders to execute enterprise-level projects that drive agility and innovation. My expertise spans stakeholder management, solutions architecture, risk management, information security, and vulnerability management—each critical to delivering successful business transformations.Continuous learning is at the core of my professional journey. In addition to holding multiple certifications in network and security infrastructure, I am currently pursuing the CISSP (Certified Information Systems Security Professional) certification to further elevate my knowledge and expertise.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.