Matt Adams

• Currently delivering a number of key projects as part of a comprehensive Information Security Improvement Programme.

• Led the development of the Target Operating Model for a global insurance provider. The key deliverables for this project were a refreshed organisation design, governance model and security activity catalogue, all of which were aligned to the business’ goals for the new security organisation.


• Managed Deloitte’s involvement in a multidisciplinary team of information security specialists tasked by the CIO of a global insurance provider to identify and remediate significant security weaknesses in business critical applications and network infrastructure.


• Provided detailed guidance to the executive board of a FTSE 100 technology company on the potential security and operational risks of implementing a Bring-Your-Own-Device (BYOD) scheme for mobile devices.


• Responsible for leading Deloitte's Information Protection services, including the design and development of a Managed Data Loss Prevention service.

• Responsible for defining the security assurance strategy used by a government smart metering programme to ensure the security of organisations and equipment involved in meeting the programme’s objectives. A highlight of this work was leading the development of a new regulatory licence condition, including developing the initial policy principles, completing a public consultation and government response, and submitting the new licence condition to Parliament.


• Completed a six-month secondment as the Information Security Manager for a global provider of employability services. During the secondment I worked closely with the business’ CIO to develop and embed a refreshed set of information security policies and procedures, ensuring compliance with UK Government security requirements.


• Responsible for leading Deloitte's Information Protection services, including the development and implementation of data loss prevention, mobile device management and data classification technology solutions for leading organisations.


• Led a review of the structure and responsibilities of teams performing anti-malware functions within a financial services company to gauge their effectiveness. This work involved producing a current state assessment of malware management responsibilities across the organisation, then using knowledge of industry good practice to make recommendations for improving the alignment of the client’s organisational structure to the types of malware threats that they face.

• Responsible for coordinating and completing multiple third-party information security assessments for a large UK banking group. This work used the ISF Security Healthcheck methodology and required a broad knowledge of information security good practice in order to identify threats to the confidentiality of customer data, and raise appropriate recommendations to address them.


• Seconded to a large UK banking group to provide support and subject matter expertise to the group’s information security and risk management function. Throughout this secondment I used my experience of working with other financial services clients to provide valuable insights on their performance in relation to industry good practice.


• Led the development and roll-out of an application tool set used by a government agency to capture and process profiling information for more than 700 information systems within their estate. The tool set used an algorithm to score each system based upon a number of factors (e.g. sensitivity of data, use of storage encryption, etc.); these scores were then discussed with management to prioritise key systems for further assessment.

• Responsible for testing the design and implementation of information technology controls to provide assurance over their effectiveness. These assessments were typically delivered either in an outsourced advisory capacity for public sector clients, or as part of a larger team providing systems assurance to support statutory audits of FTSE100 companies. The variety of clients covered by these engagements required a working knowledge of a broad range of systems and technologies.

Certification number: 685826

Certification number: ENR-00032042

Certification number: 366220

Awarded first-class honours.