Steven Bradley

CEM is a niche consultancy specialising in the advancement of Security Architecture through modelling and automation.

Skills: Information and Communications Technology (ICT) · Architectural Drawings · English

Security Modelling in ArchiMate` Security in Agile@Scale All Part of the Service Adaptive Security Architecture

Sales, Contract Management, Negotiation, Financial Planning & Accounting

Skills: Information and Communications Technology (ICT) · Architectural Drawings

The ESA practice at Proximus define the frameworks, models, mechanisms & structures in the InfoSec domain so that the business, information systems and technology capability evolve in a way that effectively supports the business strategy. Specific responsibilities included: • The analysis, development and maintenance of reference architectures, models and patterns for information security, applicable to in-house infrastructure and Cloud; • The establishment of architectural principles and guidelines for use by project architects to ensure compliance with the reference models; • Defining risk-based SecGov requirements for infrastructure projects: IAM, CASB, PKI/KMI; • Security implementation governance through re-use of Security Architecture Building Blocks and their corresponding Solution Building Blocks, leading post-implementation reviews etc. • General consultancy in support of projects and advancing the maturity in security.

As part of the ITSM team, my main responsibilities include; - Performing risk based assessments and define application and infrastructure-related security requirements for business and IT projects,including detailed reviews of business initiatives, project proposals, technical design and project lifecycle documentation, - Defining security requirements in contractual obligations for outsourced and SAAS services, - Following different projects and initiatives to ensure consistent and adequate implementation and testing of the security requirements, - Acting as security architect / subject matter expert and be the security point of contact for the business and project teams.

My main project at bpost has been the definition and establishment of an Application Security Reference Architecture: a blue-print for identity management, authentication and authorisation for internal, B2C and B2B users of bpost’s web applications and services. Supplementary duties have included conducting security reviews and generally assisting projects with security issues and guiding their convergence with the reference architecture.

Business & Technical Consultancy Senior Consultant in Secure Enterprise Architecture and Application Development Domain Expert for Information Security in Belgian Operation

Identity & Access Management, Application Security, PKI, Solutions Architecture for eFP7

Engaged as an Information Security Consultant to establish an ISO27000 compliant ISMS in readines for formal audit and provide general security consultancy to projects.

Lead Architect for News Products

Design of automated test equipment and processes in an industrial plant to product design (for testability) in IBM’s research laboratories in UK, Europe and US.