Gareth Duffy Orm

Gareth Duffy is an experienced professional in IT risk and security management, currently serving as the Head of IT Risk and Assurance at RSA since May 2019, overseeing areas such as Cyber Security, Operational Resilience, and Third Party Management. Prior roles include IT Risk and Compliance Manager at RSA Insurance Ireland Ltd., and Information Security Manager at RSA, where responsibilities ranged from managing IT risk registers to developing information security strategies. Gareth has also held positions at Ernst & Young and AIB, where contributions included project management of Cyber Improvement Programs and conducting security assessments. Educationally, Gareth holds a Bachelor's degree in Electronics and Computing from Ulster University. Gareth is credentialed with ORM, CISSP, and CRISC designations.