Looking for a job

Stephen Serra

@stephenserra

Cyber Security Operations Manager at Honeywell Process Solutions, who shaped Honeywell’s global industrial security model and grew the regional team from 6 to 43.

Qatar

Message

What I'm looking for

I’m open to roles across the GCC.

At Honeywell Process Solutions, I lead the industrial cyber security business across five GCC countries. I designed a regional operating model that was adopted into Honeywell’s global industrial cyber security operating model, and grew the team from 6 to 43.

At QatarEnergy, I built the Application Security function and established enterprise security governance within a 450-person ICT organisation. Earlier, I established the Information Security Audit & Assurance service line at Sizwe Ntsaluba, serving clients including the South African Reserve Bank and STANLIB.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Operations Manager

Current

Honeywell Process Solutions

Apr 2017 - Present (9 years 6 months)

Leads the industrial cyber security business across five GCC countries, growing the team from six to 43 and revenue from $7.9M to $40M. Designed the regional operating model adopted into Honeywell's global industrial cyber security operating model.

Industrial Cybersecurity OT ICS Security ISA IEC 62443 SOC SIEM EDR IAM Vulnerability Management Security Strategy Team Leadership Revenue Growth Board and Stakeholder Engagement Risk Management Compliance NIST ISO 27001

Security Architect

Performanta

May 2016 - Mar 2017 (10 months)

Advised C-suite leaders, boards, and audit committees on cyber security priorities and risk exposure. Led gap and readiness assessments against control standards, including PCI-DSS, and provided consulting on DLP and cloud security.

Security Architecture Risk Assessment PCI DSS DLP Cloud Security Consulting Gap Analysis Readiness Assessment

Head of Application Security

QatarEnergy

Oct 2011 - May 2015 (3 years 7 months)

Built the Application Security function from the ground up within a 450-person ICT organisation. Defined enterprise security governance, including policy, standards, and secure SDLC, and acted as the ICT-side interface to internal audit across four annual cycles.

Application Security Security Governance Secure SDLC Risk Management Vulnerability Management Incident Management Change Management Business Continuity Disaster Recovery Security Architecture Review Vendor Security Assessment ICS Security SCADA DCS

Senior Audit Manager, Security & Governance

Sizwe Ntsaluba

Mar 2006 - Sep 2011 (5 years 6 months)

Established and led the Information Security Audit & Assurance service line from scratch, managing a portfolio of 50+ audits annually. Delivered governance framework assessments, control reviews, compliance audits, penetration testing, and security architecture reviews.