David Laycock

– Associate –

David, a management consultant with 30 years experience in IT in the financial services industry, currently focusses on information security management and operational information security, although previous experience covers datacentre consolidation, vendor management, application development, IT infrastructure, IT strategy, business transformation and outsourcing. David has led a number of projects involving information security, as well as having managed software development programmes, coordinated the agreement of Master Service Agreements and devised engagement models for BPO activities. He sees himself as someone who provides direction, drive and coherence to a project, liaising between technical resources, business representatives and other stakeholders as well as reporting to and advising senior management.

David’s core competencies are:

• Information Security & Operational Information Security-consulting:: David has developed target operation models for operational information security and worked on projects to implement information security measures such as Security Information Event Management (SIEM), Vulnerability Scanning, End Point Detection and Response (EDR) as well as Data Leakage Prevention (DLP); he has also been involved in the design and implementation of Information Security Management Systems (ISMS), drafting information security policies, processes and work instructions.
• Project Management: David has served as project manager for a number of IT infrastructure projects with a focus on information security and data leakage prevention including projects for the Management Board and Supervisory Board of a major global bank. He worked on large data centre consolidation projects, in particular taking the lead on a project to migrate applications from Belgium, Italy, Spain and Portugal to Germany. David has also worked in the project management team for several very large projects, liaising with other workstream leads and taking on responsibility for several separate workstreams/teams often based in different geographic locations.
• Vendor Management: in addition to his role as project manager, David has frequently been called upon to handle the relationship with external vendors, including IT Professional Services Sourcing Strategy, Performance Management, Relationship Management, Vendor Compliance, Contract Management (MSA, SLAs, KPIs etc.). In this role David has also been responsible for reviewing and negotiating IT contracts, liaising with legal representatives, technical experts and management to conclude detailed technical agreements.
• Complexity management-– and (IT-)Process Management : David has supported clients in the development and conceptualization of new complex processes often involving numerous (sometimes external) parties; for example, he developed the engagement model for the integration of an external Security Information Event Management (SIEM) service and an external Security Operations Centre (SOC) in a client’s Target Operating Model (TOM) for operational information security.
• Published author on topics such as: IT Outsourcing → Link

David holds a master's degree (MSc.) in Information Technology Management from Coventry University, as well as a bachelor's degree (BA Hons) in French Studies from Nottingham University. Whilst he is a native English speaker, he has lived in Germany for almost thirty years and speaks fluent German as well as French.

David has achieved professional certifications as a project manager (Prince2 and PMP) as well as in the area of Information Security (CISSP).

He has experience with many industry standard tools, such as: MS Office (incl. MS Project), Confluence & JIRA, SharePoint, ServiceNow, Visio, Signavio, Clarity etc.