John Fox-Shaw

Experience

• 

  Royal Air Force (RAF)

  May 1998 - Oct 2007

  Senior Airman

  Team leader, managing a kitchen and both military and civilian staff. Providing training and mentoring, and disciplining staff when required.Demonstrated excellent organisational skills by providing the highest quality meals possible, for up to 5000 personnel, in often extreme conditions such as field kitchens in Operational Theatres including Iraq, Kosovo and the Falkland Islands.Responsible for ordering and payment of supplies, as well as transportation arrangements and housekeeping.Created menus and managed all aspects of food service for daily messing as well as high profile functions.Additional responsibilities included being positioned as station armed guard whilst adhering to the Queen’s regulations, and liaising with other sections of the camp to ensure the station remained fully operational. Show less

• 

  HSBC

  Oct 2006 - now

  Lead Analyst – Cyber, Strategic Security Threat September 2020 – PresentWithin a strategic and multi-disciplined threat team, identify, assess and report on cyber and technology issues that may create risks for the business and operations, and by extension its customers and staff. Build a deep understanding of significant and emerging threats linked to information security, cyber security and technology.Responsibilities & Deliverables: • Proactively identify significant threat issues and trends that have implications for the anticipated business and technology priorities of the Bank. Conducted comparison of nation-state linked cyber-attacks, in light of recent SolarWinds compromise. • Build strong business and functional relationships, particularly across teams responsible for threat management which support the identification and prioritisation of threats. Assisted Business Continuity and Incident Management with developing a catalogue of scenarios for cyber incidents, data loss and vendor loss.• Create probable, high-impact scenarios which can be used for proactive risk management. Effectively researched and analysed subjects for the global threat outlook report for 2021, such as challenges in critical national infrastructure and services, and the evolution of digital technology.• Participate and actively contribute to industry, cross-sector and other external partnerships.• Deliver high-impact and relevant cyber, information security and technology threat assessments, trend reporting and scenarios. Researched and analysed threats and tends effecting US; supporting a presentation for US colleagues on cyber threat trends; reviewing notable disruptive attacks or significant regulatory fines linked to cyber-attacks or breaches Show less Efficiently facilitates the recovery of significant IT incidents impacting both individual services and, in many cases, multiple services across a number of business functions (such as widespread infrastructure failures).Responsible for the management of incidents across an estate of c4500 IT services, globally, many of which are business critical.Routinely analyses and prioritises workload in order to ensure that the impact of technology incidents are minimal in terms of both business and technology Service Level Agreements (SLA).Clearly and accurately communicates the nature of individual incidents, and progress towards recovery, competently using standard communication tools. Ensures complex information is articulated in a meaningful way to a diverse audience, managing the expectations of the business stakeholders and executive management. Reliably follows structured Incident Management processes to work methodically in order to solve complex problems, ensuring that recovery steps are duly considered, clearly defined and agreed, being both auditable and compliant with Service Management guidelines.Highly approachable, readily building effective trust-based relationships with technology colleagues and business stakeholders. Maintains a good rapport to improve engagement of supporting personnel and communication flow during the incident lifecycle. Widely acknowledged as a ‘go-to guy’, being subject matter expert regarding iSeries, zSeries, Networks, Payment Services and Contact Centre incidents, due to extensive support of these systems in previous roles.Willingly shares knowledge and experience with peers in order to support their development, including mentoring of off-shore colleagues. Maintaining a positive can-do attitude to support all colleagues in their day-to-day duties. Drives change by supporting the ongoing development and testing of in-house tools, used by Service Management teams, to streamline processes leading to faster recovery of IT incidents Show less Highly regarded and proficient Technical Specialist, resulting in regular secondment to a Team Leader position, undertaking performance management duties and providing support to less experienced colleagues.Routinely demonstrated a clear understanding of complex situations and readily identified workable technical solutions in response to IT incidents. Consistent and dependable approach, adhering to Service Management policies in order to protect IT services from unscheduled disruption. Adaptable, supporting a broad range of technologies in a ‘fix at first point of failure’ model, utilising hardware and software components from a significant number of vendors.Readily identified improvements to workflow, monitoring and escalation processes in order to improve service availability and reduce costs relating to service disruption. Instrumental in projects to reduce ineffective alerting and to streamline batch recovery processes.Routine activities included: active monitoring of service performance and alerts; managing load-balancing across the network infrastructure; performing scheduled maintenance tasks; investigating exceptions and faults; supporting change implementation and disaster recovery testing using the systems management and operational tools. Show less

  • GLOBAL SYSTEM AND ACCESS CONTROLS MANAGER

    Oct 2021 - now

  • Strategic Security lead Analyst Cyber

    Oct 2020 - now

  • Major Incident Manager

    Oct 2018 - Oct 2020

  • Technical Specialist

    Oct 2006 - Oct 2018