Paul Barks

Paul Barks is a seasoned Information Systems Audit and Risk Professional with extensive experience in various industries, particularly within Financial Services, and a solid background across different service areas and global locations.

Throughout his career, Paul has demonstrated a remarkable ability to deliver results by leveraging a well-honed skill set. He values collaboration with all stakeholders, excels in driving success, and emphasizes the importance of cooperative efforts across organizational boundaries.

His expertise includes Technology Risk Management, information security framework development, and implementation in alignment with International Standards such as ISO 27001, COBIT, and PCI DSS v3.2. He is also well-versed in ensuring technology control environment assurance with respect to regulations like Sarbanes Oxley, SSAE 16, ISAE 3402, and the Data Protection Act.

Paul holds key certifications including Qualified Security Assessor (QSA) for PCI DSS, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), and Certified Information Security Manager (CISM). Additionally, he is ITIL Foundation and Prince Practitioner certified.

With a strong background in IT Audit, Paul has expertise in both internal and external audits, including establishing IT Audit Departments from scratch and creating comprehensive audit plans. He is adept at leading and managing teams through complex audits and projects, particularly in alignment with regulatory frameworks like FCA applications.

Paul's skill set extends to areas such as Business Continuity Management (to ISO22301), Data Analytics, Project Management and Assurance, and conducting Third-Party reviews, including Due Diligence assessments.

In his professional journey, Paul has held key positions including Executive Principal Consultant at NCC Group, Director of Consulting - Technology Risk at GLE Consulting, Consultant at Jefferson Wells, Senior Manager at Ernst & Young, Project Manager at Aspect Consulting, Team Leader and Business Analyst at Empower Business Systems, Programmer at HSBC, and roles in the Actuarial Department at Royal Heritage.