Steven Simpson

Security Assurance Specialist @Barclays UK

Edinburgh, GB

Vulnerability management & Remediation - Working within the wider group IT and end users, I remediate risk throughout the Bank to ensure closure of vulnerabilities whilst aligning to the IT security roadmap.I am managing and organising the BAU pen test program for the bank. Whilst managing the BAU pen test budget. Making sure we stay within budget whilst delivering valued assurance to the bank.Security assurance testing - Managing and providing oversight of Bank-wide Pen Testing assessments involving third-party vendors. Co-ordinating complex deep dives into the Bank\'s security infrastructure whilst ensuring the organisation\'s integrity and security processes are maintained.Managing full life cycle of testing, from Scoping including threat model all the way through to working with the app teams to resolve findings.Managing security vulnerabilities using Servicenow. Working with stakeholders to manage remediation work.Mentoring new team members, bringing them up to speed and being focal point for any issues.Alert Management - Analysing and triaging security alerts with Qualys to identify and respond to potential malicious activities.Vulnerability State Change Approvals - Managing the assessment and implementation of security policy exceptions and deferrals whilst analysing the potential risks.Security Awareness - Maintain and communicate awareness of security advisories to key stakeholders and reporting on the operational security status.Driving Continuous Improvement - Regularly conduct exercises, simulations and training. Providing consultancy advice and guidance to improve security maturity.Information training currency - Maintaining currency in regard to mandatory security engineering training in line with Bank procedures and policies.Security Controls & Policies - Developing and maintaining effective security controls. Providing assurance and consultancy for proposed changes to the banks\' systems.

Defence college of Aeronautical Engineering

Level 3 NVQ Aeronautical Engineering