Undisclosed

Chief Information Security Officer

The AA

The Automobile Association was created by people like you – keen drivers who just wanted fair treatment.

Not much has changed on that front since June 1905, when four driving enthusiasts banded together in London to form the AA. From day one our goal has been exactly the same: to protect you, the motorist, and put your interests first.

With over 14 million members from the original 90, it's fair to say we've grown a bit; in fact, we're now the UK's largest motoring organisation, still going strong over a century later. From setting up our first motorbike patrols to piloting 'connected cars', we've got a unique history of embracing new technology and innovations to better serve you.

Breakdown cover has always been our number one priority, but we've since branched out into finance, insurance, leisure and lifestyle services.

Director of Information Security / CISO

Head Of Information Security

I am focused on the development, management and delivery of our cyber crime, threat hunting and breach investigation services, augmented by operational cyber threat intelligence; however I am often engaged in wider projects, including General Data Protection Regulations (GDPR) reviews, ‘Cyber Fraud' vulnerability reviews, investigation and intelligence framework assessments as well as a number of spear phishing investigation and remediation projects.

I am also responsible for the development of business opportunities, management of software licensing and oversight of the technical infrastructure whole life management.  I provide counselling to the operational team and financial management & oversight of operations and projects.

Associate Director

Cyjax

Responsible for developing relationships with partner organisations, existing clients and supporting the identification of future opportunities.

I work with clients to develop their understanding of the cyber threat relative to their particular environment and industry vertical.

My objectives are to encourage current clients to efficiently utilise threat intelligence and to assist with the development of threat intelligence specifically suited to customer threat vectors.

We are market leaders in providing timely, actionable cyber threat intelligence to blue chip customers across multiple market verticals. We also track threat intelligence in Dark Marketplaces on the Darknet as well as Darknet forums.

We deliver a 'virtual' cyber intelligence analyst service for clients, who are able to leverage our research and intelligence analysts for their own cyber threat intelligence collection & analysis tasks, via our 'Requests for Intelligence' (RFI) service.

Operations Director, Cyber Threat Intelligence

Virgin Media

Security Cleared (NPPV + SC) Information Security consultant, delivering Open Source Intelligence & Investigations management, via traditional and tool based methods, including Maltego, FOCA and other open source tools.  

I was responsible for Virgin Media's counter piracy campaign, delivering a multi-layered 'defence/offence in depth' strategy to Anti Piracy Operations.  I managed both operational and strategic tasks, liaising with industry partners, trade bodies and Law Enforcement Agencies to achieve successful mitigation to the piracy threats.

One of two RIPA 'Authorising officers'; responsible for the identification of threat vectors to Virgin Media, via Cyber or traditional criminal methods, managing a team of investigators and Intelligence operatives.  I also contributing to other areas of security whether technical or physical, in line with Virgin Media's security model, using ISO27001 as a baseline.  I was also a board member of the Federation Against Copyright Theft (F.A.C.T), tackling organised crime groups at industry level.  I deliver a tiered approach to investigations & enforcement, intelligence development and team structure.  Additionally I was responsible for managing threat intelligence strategic partnerships (commercial & cross industry) for the business, supporting cyber security and physical security projects, which often help determine the company's appetite for risk.

I also managed a 3 tiered approach to revenue recovery through private prosecutions and civil litigation, working with external specialist legal counsel, targeting both internal and external fraud risks to Virgin Media, designing & implementing a framework supporting intelligence collection aligned to RIPA 2000 and the DPA 98. I also had control and oversight of all intelligence led investigations into high value threats to Virgin Media.

Manager, Threat Intelligence & Investigations, Group Risk

Clinical Solutions

Responsible for developing and managing the implementation of ISO27001 Information Security Management System, including the development of the document set, reporting to the Director of UK Infrastructure and Operations.  

Responsible for 3 direct reports, other responsibilities included:

•	Ownership of operational security management, risk management and business continuity planning, leading the ISMS implementation and producing security process documentation where required.
•	Stakeholder management with external consultants and inspection bodies.

•	Delivery of business continuity framework & facilitating validation and testing of business continuity plans, identifying and procuring secure disaster recovery & alternate business continuity sites.

Information Security Leader - ISO27001 implementer

Betfair

Group Security Incident Response & Investigations Manager.  Responsible for creating security strategies applied globally to the Betfair Group of companies, managing relationships with the legal and compliance department, senior Betfair managers, fraud, internal operations teams, internal audit, risk management partners and the Information Security Incident Response team. Responsibilities included:

•	Production of incident response procedures & policy supporting PCI DSS & ISO27001/2.  Developed framework for the management of investigations, evidence production and conducted training globally for 24/7 incident response teams.

•	Responsible for the management of critical information security incidents and investigations impacting Betfair’s global operations. Authored policies and procedures for security incident management and delivery of investigations into security breaches.

Incident Response & Investigations Manager, Group Security

Atomic Weapons Establishment, Aldermaston

Responsible for the management of information security investigations & establishing the degree of security compromise or gaps within the information security infrastructure, supporting regulatory compliance underpinning AWE’s licence to operate; delivering findings to Director Corporate Services.

This role utilised my skills in; Criminal Investigations, Interview Techniques, Crime Reduction, Counter Intelligence Operations, Computer Security and supporting Computer Accreditation issues. 

Responsibilities included:

•	Supporting compliance against Risk Management Accreditation Document Set support the collection, management and exploitation of information to develop actionable intelligence in support of the security intelligence collection plan.  Responsible for developing inter-departmental co-operation as well as forging external relationships with accreditors, ensuring a collaborative approach to compliance.

•	Delivery of Computer Security Incident Response Team policy & support to operations.

Principal Investigator, Cyber Security Team

British Army

Managed an investigation section covering South West UK.  Supervised complex enquiries managing 11 direct reports.  Undertook UK based enquiries on behalf of SIB RMP units worldwide.  Responsibilities included fulfilling the role of Local Intelligence Officer (LIO) for South West UK, chairing Tactical Tasking & Coordination Groups under the National Intelligence Model, driving intelligence led investigations across the area of responsibility and up to national law enforcement agencies.  Responsible for intelligence fusion across the SW area of operations; Investigation of all level 3 serious crime within the area of responsibility: Supervision of 11 direct reports, managing Fraud / Computer Misuse Act investigations, the interpretation of technical forensic IT examination reports, preparation and submission of Mutual Legal Assistance Treaty documentation to UK based magistrates; Proportionate application of specialist services during protracted investigations, considering budgetary constraints & implications.  Responsible for mentoring junior investigators, ensuring their development as level 3 investigators.

I was also responsible for the providing specialist support to Special Investigation Branch and Royal Military Police units deployed across Europe in the investigation and detection of serious criminal offences, reporting to senior executive.

Other responsibilities included:

•	The cultivation, recruitment, handling and management of CHIS in accordance with RIPA 2000, operating throughout Germany, Holland & Belgium.  Investigation of serious criminal military and civilian offences, ranging from fraud to murder.
•	Conducting covert operations & providing specialist support to investigation units throughout UK.
•	Conducting investigations, compiling witness statements and producing  detailed narrative reports in accordance with the Police and Criminal Evidence Act and the Criminal Justice Act.

Special Investigation Branch, Royal Military Police

Intelligence Corps, British Army

Military Intelligence & Security Operator, Herford, Germany & Iraq, Middle East. Intelligence operations in Basra, Iraq. Intelligence fusion at Divisional level, with reports being produced for the southern sector of Iraq

Intelligence Operator

A senior information security leader and Certified Information Systems Security Professional (CISSP), with diverse experience in security risk management within the UK Defence sector, global online gambling industry, a major UK telecommunications & media company, a ‘Big Four’ managed services company and latterly as the CISO at one of the UK’s most recognisable brands. 

A current ‘Certified Function’ holder under the FCA SMCR framework, with significant experience in leading the implementation of security transformation strategies, including the development of policies and standards. Influential, self-motivated, and confident senior management professional with business acumen, with extensive information security experience and a proven record leading global information security functions, mitigating exposure to cybercrime, fraud, bribery, and corruption risk in fast changing and diverse environments. 

A persuasive communicator, with outstanding presentation skills and an ability to develop relations with internal/external stakeholders as well as senior leadership. 

Taplio

Darren Desmond's Linkedin Analytics

Darren Desmond

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Darren Desmond's Linkedin Analytics

Darren Desmond

Want to drive more opportunities from LinkedIn?

Darren Desmond's Linkedin Analytics