Matthew Thorley

Background

About Matthew Thorley

As a Certified Information Security specialist, I bring 15+ years experience in the design and delivery of industry leading information security risk management, security operations and governance for large and complex organisations in the heavily regulated Financial Services sector. I’ve led transformational improvements in cybersecurity technologies and capabilities that enhance the effectiveness of security controls, expedite incident response rates, and reduce organisational risk.I enjoyed 16 years of continuous career progression with GE Money/GE Capital. As Security Operations Leader for GE Capital’s Asia Pacific region, I transitioned the security operations function from a small team of 3 based in China, to a team of 13 based in India, embedding best practice tools and frameworks, and collaborating actively with global colleagues to ensure alignment with the strategic Security Program. I subsequently managed the Security Assurance function for GE Capital Australian & NZ, leveraging Six Sigma thinking to lead a program of audit and continuous improvement. I move from GE Capital to Custom Fleet as part of the divesture of GE Businesses in Australia. At Custom Fleet I facilitated the divestment of the Custom Fleet business and contributed to the the development and execution of cybersecurity strategy, policy, tools, and capabilities within a greenfield environment to establish Custom Fleet as a stand-alone entity. In my current role as Lead Cyber Security Specialist for Latitude Financial Services I’ve led a program of transformation and improvement. This includes recruiting and developing in-house talent, implementing new tools and capabilities to reduce reliance on third parties, enabling proactive identification of potential threats, vulnerabilities and risks, and embedding robust compliance monitoring frameworks.Information Security Cyber Security IT Assurance Information Security Operations Risk Management Incident Management Incident Response Threat Hunting Threat Modelling Risk Assessments Controls Frameworks Security Contract Reviews Audit & Compliance Testing Vulnerability Management Third Party Vendor Audits Security Tool Implementation Project Management Continuous Improvement Insights and Analytics Management Reporting Team Leadership Capability Building Information Architecture Relationship Management Organisation and Planning Proofpoint Protection Server WAFCarbon Black Microsoft SCCM DMARC Fraud Defence Cloud Computing Forensic Investigation