Open to opportunities

Andrew Mercuri

@andrewmercuri

Message

Strategic Enterprise Security Architect with extensive IAM and risk management experience.

Australia

Message

What I'm looking for

I am seeking a role that allows me to leverage my security expertise while fostering a culture of innovation and collaboration.

I am a strategic and detail-oriented Enterprise Security Architect with a wealth of experience in Identity and Access Management (IAM), risk management, and security operations. My career has been marked by a proven ability to lead enterprise-wide security transformation projects, assess and implement robust security architectures, and ensure compliance with leading industry standards and regulations. I pride myself on my strong leadership, communication, and technical expertise across on-premise, hybrid, and cloud environments.

In my most recent role as a Senior Enterprise Security Architect at Toyota Motor Company Australia, I successfully delivered a company-wide security roadmap that was approved by architecture governance boards. I served as the service owner for key security platforms, designed secure enterprise IT architectures, and implemented significant security uplift initiatives. My experience also includes mentoring technical teams, supporting incident response, and facilitating security tabletop exercises to evaluate incident response performance.

Throughout my career, I have held various positions that have honed my skills in security governance, risk assessments, and security operations. I am passionate about integrating emerging technologies into security postures and continuously improving security practices to protect organizations from evolving threats.

Experience

Work history, roles, and key accomplishments

Senior Enterprise Security Architect

Toyota Motor Company Australia

Apr 2022 - Apr 2025 (3 years)

Delivered a company-wide security roadmap approved by architecture governance boards. Led major security uplift initiatives, including CMDB, CyberArk, Cloudflare, DevSecOps, and SOC improvements.

Cloudflare Keyfactor DevSecOps SOC Security Architecture Risk Management Incident Response Stakeholder Management

Senior Security Analyst – Identity Oversight

National Australia Bank

Aug 2021 - Feb 2022 (6 months)

Provided IAM governance and advisory on identity-related controls and processes. Managed SailPoint IIQ & IdentityNow platforms and delivered executive-level reporting on risk posture.

IAM SailPoint IIQ Governance Audit Compliance Identity Management Access Management

Security Operations Analyst

Aware Super

Mar 2020 - Mar 2021 (1 year)

Managed security incidents and coordinated responses through Symantec/Accenture SOC. Conducted vendor risk assessments per APRA CPS 234 and administered Microsoft Azure and Office 365 environments.

Security Operations Incident Response Microsoft Azure Office 365 Vendor Risk Management Vulnerability Management Qualys Nessus

Security Analyst

Future Fund

May 2019 - Jan 2020 (8 months)

Managed daily/weekly SecOps activities across hybrid environments. Implemented and maintained PAM (CyberArk) and RBAC structures, and performed internal risk assessments using CSP234, NIST, ISO27001.

SecOps PAM RBAC Risk Assessment CSP234 NIST ISO 27001 SIEM

Senior Cyber Security Consultant

Ernst & Young

Feb 2017 - May 2019 (2 years 3 months)

Led IAM remediation efforts and developed RBAC/PAM solutions. Acted as SME for application and platform security across various operating systems.

IAM RBAC PAM Application Security Platform Security Windows Unix Oracle SQL Security Consulting Technical Training

Software Licensing Analyst

Coles Supermarkets

Jun 2016 - Dec 2016 (6 months)

Provided expert SAM advice and vendor negotiation support. Ensured enterprise-wide license compliance and reporting, driving improvements to SAM processes.

SAM Licensing Reporting Process Improvement

Software Asset Management Technical Support

Telstra Corporation

Feb 2013 - Mar 2015 (2 years 1 month)

Managed procurement and audit compliance for enterprise software. Maintained licensing records in Flexera and supported datacenter software compliance using BMC Discovery.

Procurement Compliance Flexera BMC Discovery

Education

Degrees, certifications, and relevant coursework

Deakin University

Master of Information Technology, IT Security

Specialized in IT Security, gaining expertise in advanced security concepts and practices. Focused on enterprise security architectures and risk management.

Victoria University

Bachelor of Business, International Trade

Majored in International Trade, developing a strong foundation in business principles and global commerce. Gained insights into international market dynamics and trade policies.