Consultant Profile

An information security and risk management consultant with over ten years experience in the information security field, both in Australia and Europe. Over this time, Jake has become highly proficient in developing in-depth information security risk assessments and gap analyses. He has also developed a wide range of IT security policies, standards and procedures based upon business needs, risk assessments and cost benefit analysis.

Jake’s specialist skills and experience include:

• Information security planning and strategy;
• IT risk assesment and management;
• ISO 27001 ISMS implementation;
• Info sec policy development; and
• Security awareness and training.

Jake has consulted to a diverse range of clients in the finance, telecommunications, government, manufacturing, utilities, and ICT security service sectors. Coming from both a technical network security and business management background, he has a unique insight into how technical security controls can be aligned to business objectives. Jake has a thorough understanding of many Australian and international IT security and risk management standards, including ISO/IEC 27001/27002/27005, AS/NZS 4360, HB231, NIST SP800-30 and COBIT.

Jake is a Certified Information Systems Security Professional (CISSP). His additional qualifications include a Post Graduate Diploma in Information Technology (QUT) and a Business Management Honours Degree (Plymouth University, UK). He holds professional memberships with the Australian Information Security Association (AISA), the Information Systems Audit & Control Association (ISACA), and (ISC)².

The following comments are often made about Jake's consulting services: 'Jake opened our eyes to aspects of security that we had not considered previously', and 'The risk report provided us with a complete view of our current risks and will also be an invaluable asset for showing to auditors'. Referee details will be provided on request.

LinkedIn Profile: www.linkedin.com/in/jakesmithconsulting