Joe B.

Experience

• 

  Ian Mason Sweepers

  Jun 2002 - Jun 2011

  Drainage Specialist

  Building and working within a family business providing services in drainage solutions and commercial road cleansing. Duties included:• Using specialist equipment and technology to identify problems, survey and compile reports, recommending and implementing the best course of action.• Establishing and maintaining relationships with various clients.• Complying with health and safety regulations and ensuring compliance with the law.• Being the face of the company, developing relationships with customers, including finding new business opportunities • Training and supervision of staff.• Record keeping – keeping log of all works carried out and producing invoices.• Driving specialist vehicles on site and on public roads including left hand drives within the construction industry.• Vehicle maintenance Show less

• 

  The Royal Dragoon Guards

  Jun 2011 - Aug 2016

  Advanced Signaller

  Working as an Advanced Signaller/Tank Crewman. Main skills utilised:• Responsible for voice and data communications infrastructure at squadron level.• Leadership skills: the ability to motivate, assess situations, make decisions, determine goals and achieve results through resourcefulness. Teaching and supervising in a clear and effective manner. • Analytical: research, gather, evaluate data, and interpret information and apply logic. • Organisational skills: time management, ability to prioritise, manage resources, multitask, direct and coordinate. • Interpersonal skills: the ability to listen, follow orders, cooperate, supervise, negotiate and be a team member.• Data Management: record keeping, researching, translating and compiling data. • Technical skills: application of practical know how and hands on proficiency with specific equipment and machinery.• Personal qualities: having resilience, self-discipline and control, being punctual, reliable and mission orientated. Show less

• 

  FDM Group

  Sept 2016 - May 2018

  Conducted training as an FDM Advanced Ex-Forces Programme:FDM Information Security Programme 2018 - 2018Joe has also completed the FDM Information Security Programme. This programme includes the following modules:1. Professional Skills 6. Risk Management2. Threats & Attacks 7. ISO / IEC 270013. Security by Design 8. GDPR4. Technology & Tools 9. Final Project/Sign Off Week5. Cryptography Additional Qualifications gained through FDM 2017 - 2017• Prince 2 (Foundation)• ITIL Foundation Certificate in IT Service Management• Professional Scrum Master (PSM I) Show less Co-ordinated and managed end-to-end activities to ensure the successful recruitment and facilitation of Ex-Forces personnel into second careers in a fast paced, ever changing, target driven environment.• Being the first point of contact for all ranks of Ex-Forces personnel from initial interaction, through training and when placed on client site.• Researching current trends in various sectors and deciding best approach to utilisation.• Establishing and maintaining relationships with potential trainees, establishments and agencies.• Interviewing, assessing and advising candidates.• Presenting to various levels of hierarchy both internally and externally. • Resourcing and filtering candidates for bespoke roles.• Organising monthly “Insight Days” giving potential candidates a look at FDM’s “Ex-Forces Programme”. This included making sure all facilities were provided, all timings were adhered to and expectations exceeded.• Running successful advertising campaigns through social media.• Health and Safety representative for FDM Leeds and appointed First Aider. Show less

  • Project Managment Trainee

    Jun 2017 - May 2018

  • Ex-Forces Recruiter

    Sept 2016 - Jun 2017
• 

  UK Home Office

  Aug 2017 - May 2018

  Emergency Services Network Survey Analyst

  Surveying over three hundred sites in the UK to identify and understand requirements and mobile network coverage, in order to provide solutions to the three emergency services (3ES) and other users, as part of the Special In-Building Solutions project team, under the Emergency Services Mobile Communications Programme (ESMCP).• Dealt with sensitive data from all three emergency services and adhered to the relevant policies and guidelines. • Visited and surveyed various sites in England, Wales and Scotland, to identify if solutions are required to augment the Emergency Services Network (ESN) coverage from Airwave solutions, while providing assurance to the user community, Special In-Building Coverage Project Team, and the overall Emergency Services Mobile Communications Programme (ESMCP).• Undertook physical surveys of radio, voice and mobile network coverage to collect readings and other data, to enable the Special In-Building Solutions Project Team to understand requirements of users and sites in order to provide effective coverage solutions to implement the Emergency Services Network (ESN) in buildings.• Operated specialist surveying and network equipment and software to collect voice, radio and 4G LTE data and readings, used to provide in-depth analysis of voice and broadband coverage for In-Building solutions.• Produced various reports from the set of data collected using specialist surveying equipment and speaking to user representatives at various sites, for use in requirements identification, analysis, and development of complete coverage solutions.• Ensured effective stakeholder management by conversing with diverse types and levels of stakeholders including the three emergency services, other users and site representatives; recording requests, information and needs, helping the Special In-Building Coverage Project Team to provide efficient and effective feedback to users. Show less

• 

  Bupa

  Jun 2018 - Aug 2019

  Information Security Operations Analyst (Level 3 DLP)

  Operating within a Security Operations Centre (SOC) as a SOC Level 3 analyst (DLP) carrying out incident response activities by analysing, investigating, documenting and reporting on various security issues and threats, with main role focused around Data Loss Prevention (DLP) and Network Access Control (NAC).• Working with various tiers of management investigating, managing and processing email DLP escalations.• Responsible for analysing, vetting and reviewing a variety of data and emails, using various systems and applications, to ensure the proper operation of Bupa’s email gateway in accordance with its Data Loss Prevention (DLP) policy/strategy, preventing data exfiltration and ensuring compliance with ISO 27001 Information Security Standard and General Data Protection Regulation. • Investigated inbound communication into the organisation’s network, mostly via email containing malicious/suspicious content or attachments to prevent spam, phishing, malware and other attacks, while providing data as part of, and supporting, the Threat Intelligence team.• Carried out other tasks within the Security Operations Centre, as directed by the Security Operations Manager, dealing with Access Control Lists, Intrusion Detection System, Intrusion Prevention System, Malware, Incident Response and Threat Intelligence, to enable the completion of various projects. Show less

• 

  HSBC

  Aug 2019 - May 2020

  DLP Incident Management Specialist

  Tier 1 Bank Data Loss Prevention (DLP) Incident Management SpecialistTaking ownership of numerous international potential data breach investigations, from email and unauthorised web uploads to paper breaches and oversharing internally, within a major global bank from the point of escalation through to point of complete closure. • Working cases from around the world, including cases that crossed country boundaries, understanding and complying with various regional regulatory censure and data laws, and the relevant exceptions.• Took ownership of global data breaches spanning the entire business functions of the bank including Global Markets and Investment Banking, Commercial Banking and Financial Crime.• Identifying, informing and liaising with relevant stakeholders including various levels of hierarchy and relevant Business Information Risk Officer, Regularly Compliance Officer, Data Protection Officer and/or legal representative. • Correctly and clearly recording and reporting on relevant information gathered throughout the investigation, and providing timely updates, sometimes globally, across the organisation.• Triage and prioritisation of incidents based upon severity, risk and ongoing internal factors, in order to minimise potential impact on business.• Using strong analytical and investigative skills and experience to identify root cause of incident and ensure risks are recorded, recovery undertaken and relevant changes are implemented to prevent reoccurrence.• Working as part of wider Security Operations Centre (SOC) team to identify, assess and provide feedback on DLP specific incidents, whilst providing support on non – DLP specific cases. Show less

• 

  Bupa

  Aug 2021 - Jan 2024

  Identifying and overseeing various Data Loss Prevention improvement projects and acting as second to Head of Data Intelligence and Control, whilst day to day managing, leading, and mentoring a team of up to 15 skilled analysts who respond to and monitor various possible data exfiltration incidents and alerts within a busy Security Operations centre at a major healthcare insurance provider. Team covers:Incident Response Email DLPWeb/Cloud DLPRemovable Media DevicesNetwork Access ControlPrivileged Access ManagementAccomplishments:· Advised, created, and oversaw DLP rule creation and tuning, reducing false positives whilst maintaining appropriate level of security and business functionality.· Designed and implemented new approval system allowing improved collaboration with the business in appropriate responses to alerts.· Designed and implemented new manager notification process eliminating unnecessary escalations whilst increasing wider awareness companywide of correct procedures in line with AUP (Acceptable Use Policy).· Involved in idea, creation, advisory, approval and evaluation stages regarding other process improvements leading to both improved response time, further incident identification and more efficient working practices.· Designed, tested, and created new DLP ticketing system within ServiceNow and oversaw transition from old system to new.· Established training and progression plan for all analysts at various levels within the team whilst providing appropriate mentorship throughout all stages.· Established working schedule, ensuring relevant strengths from various team members were utilised at the optimum times, whilst ensuring less experienced team members gain exposure and opportunities to develop and build on their skills· Was selected to become a "Privacy guru" providing advice and creating relationships within the business. Show less Oversee various projects around DLP improvements whilst also running two security teams in different parts of the business.Areas of note:• Oversaw and actively involved in implementation of new email DLP system of part of the business which previously had no control.• Actively involved on a decision-making level on the launch of a DLP control system around inbuilt instant messaging app.• Arranged, assigned and oversaw implementation of secure file sharing system for an ongoing business merger whilst one part of the business was being disbanded.• Reporting to senior stakeholders on improvements made, KPIs met, resource requirements. Show less

  • Information Protection Manager

    Jun 2020 - Jan 2024

  • Cover for Head of Data Intelligence and Control

    Aug 2021 - Jan 2022
• 

  AstraZeneca

  Jan 2024 - now

  Building and maintaining a detailed assessment of AZ’s DLP capability to ensure opportunities are identified for standardised ways of working that meet regulatory and compliance needs.Identifying the need for, and establishing appropriate standards and guidelines for data loss prevention.Creating and maintaining ownership accountability and responsibility guidance in the business community.Establishing standard methodology for partnering with business users who consume AZ data to ensure AZ maximises the value from its data.Aligning the capabilities to the enterprise data and information strategy.Embedding and aligning data access and transfer activity with privacy and information security programmes and initiatives.Continually assessing and identifying risks in line with the AZ risk management approach, ensuring they are owned and as appropriate mitigated and accounted for.Supporting project planning and management to ensure standard methodology and finance frameworks are followed with regards to the enterprise data and information governance team. Show less

  • Director - Data Loss Prevention

    Dec 2024 - now

  • Associate Director - Enterprise Data Loss Prevention

    Jan 2024 - Dec 2024