You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Malt Strategy
Trevor C.TC

Trevor C.

Cyber Security Lead

€579/day
Dublin, IE
15+ years
Enterprise Vulnerability Management at Scale
Cloud Security Hardening (Multi-Cloud Environments)
Threat Intelligence & Risk-Based Security Decisions
Security Compliance & Audit Readiness (PCI DSS, SOC 2)
Cross-Functional Security Leadership

Average response time: 1 hour

About Trevor

I help organisations reduce vulnerability exposure and focus on the risks that actually matter.

Cyber Security Lead specialising in Vulnerability Management, Cloud Security, and Risk & Compliance (PCI DSS, SOC 2).

I support organisations in reducing cyber risk by turning large volumes of security findings into clear, prioritised actions aligned to business impact and compliance requirements.

I’ve led enterprise vulnerability management and risk governance programmes across complex environments, improving remediation efficiency, reducing backlog, and strengthening overall security posture.

My approach is practical and outcome-driven — implementing risk-based prioritisation, improving processes, and aligning security controls to PCI/SOC2 requirements.

Trusted by security and risk leaders in regulated environments to deliver measurable improvements in security maturity and resilience.

Available for short-term engagements, health checks, or longer-term support to improve vulnerability management and reduce risk.
Hotel industry
Banking and Financial Services
Consulting and Audits
Digital and IT Services
Insurance

  • English

    Native or bilingual

Remote only
Primarily works remotely

Experience

  • Global Fortune 500 Travel Technology Enterprise
    Senior Cyber Security Lead | Vulnerability Management | Risk & Compliance (PCI, SOC2)
    DIGITAL AND IT
    September 2021 - Today (4 years and 9 months)
    Senior Cyber Security Lead with extensive experience driving vulnerability management, threat intelligence, cloud security, risk reduction, and compliance across large-scale enterprise environments.

    Proven track record leading security programmes within complex cloud and hybrid infrastructures, with a strong focus on identifying real-world risks and implementing practical, scalable controls.

    Experienced in delivering and supporting compliance frameworks including PCI DSS, SOC2, and data protection requirements, while working closely with engineering and business teams to strengthen overall security posture.

    Combines deep technical understanding with strong stakeholder engagement to reduce risk, improve operational resilience, and drive measurable security outcomes.

    Led enterprise vulnerability management and security assurance programmes across large-scale environments

    Managed escalation of high-risk vulnerabilities in line with PCI DSS and SOC2 requirements, ensuring timely remediation, stakeholder visibility, and alignment with defined SLAs

    Delivered security improvements across cloud and legacy infrastructure, reducing overall attack surface

    Led cross-functional projects including network segmentation and compliance remediation

    Managed third-party vendors for penetration testing, scanning, and security assessments

    Provided risk reporting and insights to senior stakeholders to support decision-making
    Enterprise Vulnerability Management at Scale Threat Intelligence SOC2 PCI DSS GRC
  • Global Fortune 500 Insurance Enterprise
    Security & Risk Lead
    DIGITAL AND IT
    April 2010 - September 2021 (11 years and 5 months)
    Acted as subject matter expert across enterprise vulnerability management and risk remediation, leading end-to-end programmes across large-scale infrastructure, application, and cloud environments. Delivered risk-based prioritisation using CVSS, threat intelligence, and exploitability data to drive effective remediation aligned to defined SLAs.

    Designed, enhanced, and operationalised vulnerability management frameworks and secure configuration standards, improving process efficiency, remediation outcomes, and overall security posture. Integrated threat intelligence into vulnerability management workflows to strengthen prioritisation and reduce exposure to active threats.

    Delivered measurable reduction in vulnerability exposure across enterprise environments, supported by improved prioritisation, remediation processes, and configuration drift controls

    Delivered executive-level reporting on risk exposure and vulnerability posture to support informed decision-making.

    Provided leadership, mentoring, and capability development across security teams, driving operational maturity and strengthening organisational resilience.

    Managed Unix and Windows environments across test, pre-production, and production

    Delivered automation through scripting to improve operational efficiency

    Supported patching, system hardening, and server lifecycle management
    Threat Intelligence & Risk-Based Security Decisions Cloud Security Hardening (Multi-Cloud Environments) Security Compliance & Audit Readiness (PCI DSS, SOC 2) Enterprise Vulnerability Management at Scale GRC

Recommendations

Be the first to recommend Trevor

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Signup to reveal

Education

  • BSc Business Network Engineering
    UK University
    2004
    Business and Operations Mgt. Client/Server Apps. Computer Networks Data Structures for Networks E-Commerce Financial Management Industrial Work Practice Management Practice Multimedia Networks Network Language Programming Object Orientated Design & Programming Resources Management Strategic Management Supply-Chain Management
  • MSc Information Security
    Lulea University
    2015
    Applied Computer Security Business Applications Development Computer Platforms Computing Solutions Critical Infrastructure Protection Database Analysis & Design Digital Forensics Financial Systems and Auditing Implementation Project Information Security Governance Information Security Risk Management Information Systems (IS) Project Internet Security Introduction to Information Security Legal Regulation and Privacy Master Thesis in Information Security Multimedia & Internet Development Practical Cryptology Scientific Methods Security Architecture Software Constructs and Tools Systems Analysis Trends in IS and Information Security Web Site Management
Check out Trevor's education

Certifications

  • Security Essentials
    GIAC
    2018
    Enterprise Security Fundamentals Security governance, policy, and compliance awareness Incident response and security monitoring fundamentals Security controls, IAM, and access management principles Risk-based Vulnerability Management and Threat Intelligence Cryptography and secure communications basics
  • Network Penetration Testing and Ethical Hacking
    GIAC
    2019
    Web application security testing fundamentals (OWASP-based approach) Network traffic analysis and attack surface enumeration Defensive insight development from offensive security techniques Security assessment reporting with clear risk articulation and remediation guidance Ethical hacking principles and structured attack simulation approaches Password attacks and authentication weakness assessment techniques Vulnerability identification and validation across networked systems and services Active directory attack concepts and privilege escalation fundamentals Exploitation techniques for common enterprise vulnerabilities and misconfigurations Network penetration testing methodology
Trevor's certifications are only visible to Malt Community members

Skill set

Data Privacy (GDPR, CCPA)
GRC (Governance, Risk and Compliance)
Least Privilege Principles
Penetration Testing
Threat Intelligence
Risk and Vulnerability Assessment
Qualys
IT Strategy
Cloud Platforms and Infrastructure
Risk Management
Risk analysis
Threat Intelligence and Management
IT-Security
Information Security Risk Management
IT Audit & Assurance
Regulatory Compliance (PCI DSS, SOC 2)
Third-Party Risk Management (TPRM)
Security Policy & Standards Development
Enterprise Risk Management
Vulnerability Management (Enterprise Scale)
Cyber Threat Intelligence (CTI)
CVE / Threat Exposure Analysis
Patch Management Strategy
Attack Surface Management
Risk-Based Vulnerability Prioritisation
OSINT (Open Source Intelligence)
NIST Cybersecurity Framework
ServiceNow
Atlassian JIRA
slack
MS Teams

Categories