Coralisle Group Ltd. Technology Security Officer (TSO)
May. 2015 - Dec. 2021Hamilton, BermudaCoralisle Group is a Bermuda-based company with operations in Bermuda, the Caribbean and select international locations. With equity in excess of $180 million, CG manages over $300 million in premium income and over $55 million in pension contributions annually. Total equity for the group is in excess of $250 million and CG writes premium in excess of $330 million. Monies received for investment in pension and life assets exceeded $87 million. vCISO role covered the coordination, implementation and monitoring of all information security programs and activities for the Coralisle Group providing all necessary oversight and advice including reporting to the Risk & Audit Committee, Board of Directors, and other SBU senior management. Providing technical guidance and recommendations to the Company’s IT department and across business units about the risks and control measures associated with new & emerging technologies and the changing threat landscape. Reporting to the VP of IT and the board of directors for prioritization of information security improvements and input to the capital planning process, conduct external & internal penetration tests as necessary, conduct technology risk assessments, third party assessments both in terms of vendors and clients, and manage investigations of anomalous events and recommend remedial actions as necessary.
My focus at Coralisle was the establishment of an adaptive security architecture, with a mandate from the Board of Directors to transition CG cyber security from a perimeter based architecture; this included aligning controls to the NIST cyber security framework and maintaining CG's Cyber Essentials Plus certification, deploying advanced technologies to gain deep visibility across networks (SIEM, log analysis, AI, machine learning), obtaining and acting on threat intelligence, providing incident response and continuous vulnerability assessment coupled with effective enterprise patch management.