Matt Lemon

Partner @Shield IQ Cyber Servicesw

IrelandPartnerProfessor🧑‍🔬 Engineer🧨 ConsultingSystem Architect🧮 EducationProject ManagerComputer engineer✔️ ITSecurity AnalystCSO💼 C-level Executive

Matt Lemon is a seasoned professional in the cybersecurity industry, currently serving as a Partner and vCISO at Shield IQ Cyber Services. He boasts extensive experience of more than 20 years in the industry and a background in providing strategic cybersecurity solutions, managing cybersecurity risks, and protecting valuable data. Over the years, Matt has demonstrated exceptional skills in developing and implementing cybersecurity policies, thereby establishing a safer and more secure digital environment for businesses. His expertise lies in areas such Governance, Risk and Compliance, Virtual CISO, data protection, information assurance, risk management, and vulnerability assessment. Matt's ability to anticipate potential threats and devise effective preventative measures set him apart in this fast-paced, ever-evolving field. Now, at Shield IQ, he continues to leverage his skills to protect businesses from advanced cyber threats.

Feedback from Matt’s ex-colleagues

Let me see

Keep in touch with meI'm using Intch to connect with new people. Use this link to open chat with me via Intch app

Network Power<100 people

Roles

💸100%

Marketing

✨100%

Business Owner

🧑‍💼100%

C-level Executive

Geos

🇮🇪100%

Ireland

Work Background

Shield IQ Cyber ServicesPartner

Apr. 2024Cybersecurity consulting partner.

HuaweiCSO - Huawei Cloud

Jul. 2023I lead the security function for Sparkoo Cloud Ireland. As part of my executive function I work with regulators and governments on new, existing and upcoming guidance, certifications and regulatory matters; giving input where possible. I am also responsible for meeting with existing or potential customers to explain how seriously Security and Privacy are taken within Huawei Cloud and to ensure that any questions they have and due diligence that they have to do are fully answered.

CCT College DublinAssociate Lecturer

Apr. 2023Dublin, County Dublin, IrelandAssisted with the development of a brand new Masters in Cybersecurity and taught Cybersecurity Diploma.

HuaweiChief Information Security Officer - Huawei Mobile Services

Jan. 2020 - Jul. 2023GlobalAt HMS I directed security operations for the mobile and cloud ecosystems. I managed several teams such as the Security Operations Center (SOC), Fraud Prevention and also Governance, Risk and Complaiance (GRC). I had responsibility for the vulnerability analysis programme, penetration testing, red-teaming, incident management functions and corporate security. Security operations are based on ISO and NIST CSF standards ensuring business continuity. My role included the assessment, upkeep and mitigation of security risks for device, cloud and network services in collaboration with R&D, security teams, O&M and privacy teams.

Ulster BankChief Information Security Officer

Apr. 2019 - Jan. 2020Dublin, Leinster, IrelandHighly experienced in governance, the risk management lifecycle, and information and cyber security, I play an important part in helping Ulster Bank operate in a secure environment and protect our customers from malicious and fraudulent attacks As our customers' and the banking industry's dependency on digital increases, I have a responsibility to our customers to keep them and the bank safe which sees me lead and shape the future security strategy of the business. I have responsibility for leading the Ulster Bank Ireland DAC Information and Cyber Security team, where I lead the security roadmap, preparation and response to major cyber security threats, as well as any unexpected events that adversely impact the bank. My role is to develop a security vision and strategy that is aligned to the bank’s priorities, and provides a safe and secure environment, delivering threat analysis and recommendations to other senior management which enable and drive effective, timely mitigation and remediation activities.

IBMPartner, IBM Security

Feb. 2017 - Apr. 2019GlobalAs a Partner in the Cloud Security Practice, my role is to understand client and market need then define and build the appropriate engagement model such as a cloud migration strategy or other cloud and security-based topics including: - Application Security - Optimisation of Cloud Security - Data Security - Governance Models & Frameworks - Metrics & Monitoring - Network & System Security - Identity & Access Management - Cloud Forensics - Automation & Orchestration I lead the end-to-end Cloud Security capability for the Global Security Services Practice and manage a high performing team that develop and maintain a very high bar of achievement for clients and IBM. A large percentage of my time is spent working with clients to deliver value to their Information Security organisation, developing on-premise and cloud strategies and solutions. Leading the management of all facets of the Cloud Security space requires thought leadership, team building, and delivery leadership across the spectrum from strategic consulting to cloud-related systems integration and cloud-delivered services. I work with IBM and third-party security technologies, leading 3rd party alliances, and our IBM Cloud team as well as AWS and Azure clouds in a hybrid or multi-cloud environment. I have experience of delivering large enterprise solutions to global organisations with costs of over $1 billion. These have been delivered to global financial services, media, legal and many other markets. I also retain my technical and hands on skills and working style.

IBMCISO for SAAS Cloud Security

Mar. 2015 - Feb. 2017IrelandAs part of the Cloud organization and in my role I worked to identify, analyze and resolve complex cloud security issues across the entire Cloud Business unit. I worked with senior engineering & development teams to design and implement cloud systems to meet business, customer and security needs across the cloud BU. I also conducted security reviews both on our own products and offerings as well as our suppliers and business partners. There was also a large element of identifying and reacting to potential network attacks and intrusions, responding to, investigating and analyzing potential or actual security incidents and work with technical resources across cloud to implement controls to mitigate information security risks. I was an evangelist for moving to a Red/Blue testing program and work on that with the different business units and our ethical hacking teams. I had responsibility to provide security guidance documentation such as Pen Testing Policies, encryption policies and other policies that will help to create more secure products and environments. As part of my role I had time to do Project and research work that may in some way improve or help the Cloud division within IBM. To do that I spent a proportionate amount of time working with clients and business partners to make sure that we are providing what they need to be effective. My aim was to make our clients experience with IBM as easy as possible whilst still ensuring that we are innovative with our security measures, our policies and procedures.

DaonGlobal Head of Information Security

Apr. 2014 - Mar. 2015Washington D.C. Metro AreaDaon is the leading provider of Identity Assurance systems globally, headquartered in Washington DC with offices in ten locations. Daon provides software and services to governments and organisations to assist them in managing the identities of their citizens, customers or employees. • Security scans and audits on corporate information systems including cloud and remote locations. • Coordinating risk mitigation and verifying compliance. • Monitoring the status of information assets and scanning for vulnerabilities. Key achievements: • Collaborated with IT team to enhance corporate information security posture; • Worked with other business units to get them to engage security from the start; • Performed regular audits including vulnerability scan; • Maintained & monitored corporate network security & availability; • Ownership of risk assessment program; • Development of CSIRT; • Reviewed network and system logs for anomalies; • Ensured systems were operated in compliance with existing security policies and developing new policies and procedures where appropriate; • Maintained list of approved hardware and periodically scan for discrepancies; • Maintained list of approved software and periodically scan for discrepancies; • Participated in Configuration Control Board reviews; • Reviewed and recommended security technologies to protect company assets.

Eolas TechnologiesChief Technology Officer & Expert Witness

Jan. 2010 - Mar. 2014DublinProvided advisory and technical services in the areas of ICT Governance, IT Auditing, Risk, Compliance, Digital Forensics, eDiscovery, Data Protection, PCI-DSS, Expert Witness testimony and penetration testing. Delivered business value to clients by combining entrepreneurship, financial knowledge, business process management, consulting and IT excellence. Tenacious attitude to gain buy-in, using communication, stakeholder management and assertiveness. Specialties: • IT Security • Networking • Architecture & Business leadership of Technology • IT Security Leadership • Disaster Recovery & Business Continuity • IT Risk Governance and Compliance • Risk Management • Security Organizational Development • Program & Project Management • CISM • CISA • CISSP • Data Protection • Expert Witness • Digital Forensic Investigation • Incident Response I perform forensic examinations of computer equipment, phones and tablets then compile a report detailing the findings. I often appear in court to give expert witness evidence to the court and have worked on a variety of case topics.

Government of Ireland Chief Information Security Officer

Nov. 2008 - Dec. 2010Dublin 2Provided visible leadership within the technology, security and risk management space, anticipating and reacting to major technology changes to ensure the maintenance of company leadership in the competitive landscape across North America, Europe, Russia and Asia. Established technical vision and led all aspects of technology development. Played an integral role in strategic direction, development, and future growth and Ied the execution of a technology strategy for technology platforms, partnerships, and external relationships, establishing technical standards as well as ensuring adherence to them. Built and managed a top-flight technology team and oversee security, research and development, as well as project management. Additionally advised the rest of Senior Management on Risk, be that ICT or corporate risk and also on matters of Data Protection. Key achievements • Designed and implemented global WAN connecting eleven campuses • Implemented and support a private cloud for running line of business apps and a public cloud for running Web based applications and websites within. • Planned and performed security testing on the new WAN, creating associated security policies. This included DLP, IPS and ability to log and trace events. • Developed a plan and completed the conversion from a physical to virtual infrastructure. • Conducted “Gap Analysis” against ISO 27001 and worked to resolve issues. • Performed ICT and corporate risk analysis. • Obtained ISO 27001 accreditation for the organisations ICT service. • Developed, implemented, tested and documented the current DR / BCP strategy. • Improved technical support across the eleven campuses by the implementation of a service desk management system.

William FryChief Information Security Officer

Jan. 2002 - Nov. 2008Dublin 2Key achievements • Successfully managed the specification, design, procurement and installation of a virtualised infrastructure which now supports some 60 servers; • Fully accountable for IT security (both internally and externally), ensuring all vulnerabilities are dealt with promptly and effectively; • Successfully planned and implemented an upgraded internal Datacentre with sufficient power and cooling for several hours of power outage. The centre is viewable and can be monitored from a secure web server.

Irish Life & PermanentConsultant

Jan. 2000 - Dec. 2001Dublin• Managed the development of a corporate Intranet and applications to increase the appeal of the system; • Specified the hardware and platform that the system was run on and project managed overall development; • Facilitated the import of data from various sources to SQL databases, where it was used on the Intranet; • Managed the technical side of a large conversion from a mainframe forms system to an Intranet application.