Anders Sandell Email & Phone Number

Stockholm, Stockholm, Se

Montreal, Quebec, Ca

Reporting to the CISO of Nordea.

In my role as Senior Operational Risk Officer I was located at Group CISO Office where I was involved in setting up a framework for handling operational risk in terms of information security risks. This work comprise all parts of information security risk management from identification of risks to follow-up on risk mitigation activities as well as reporting on risk to different stakeholders and includes, among others, the following areas:- defining ways of setting and expressing risk tolerance/appetite- identifying key risk indicators and ways of monitoring- analyzing results from risk and compliance focused self assessments- working with and supporting Business Information Security Officers located in first line of defence in implementing the Information Security Risk Management Framework- assessing and enhancing processes and procedures for incident and continuity management- integrating information security reporting in the Groups operational risk reporting

Montreal, Quebec, Ca

As Security Officer for the Strategic Business Unit Nordics I had the overall responsibility for managing security risk within the region that covers Norway, Denmark, Sweden, Finland and the Nordic Infrastructure Operations. In this role I reported to the Enterprise Security Officer and supported four Business Unit Security Officers that has the responsibility for operational security within their respective Business Units. I was reporting monthly to executive management on general security status as well as status on related projects.

Montreal, Quebec, Ca

My area of responsibility covered the security work within CGI Swedish operations that provide consulting services, outsourcing and BPO services and software services to a large number of Swedish and international customers, many in highly regulated and complex sectors such as finance and insurance. I was reporting to the COO of CGI Sweden and were responsible for the security team. In this role my main tasks included:• Establishing and maintaining a strategic security plan for CGI Swedish operation, breaking down the plan in projects and activities, follow up and report to senior management on overall progress and to support the organization in implementing the plan.• Designing, implementing and maintaining a business management system for information security, based on CGI’s enterprise security framework and ISO 27001/2 including a governance structure and processes as well as policies, procedures and supporting security controls.• Implementing and maintaining a security risk management framework to support security decision and prioritization and to establish cost effective security processes and solutions.• Designing and implementing a framework for business continuity management where business impact assessments and risk assessments provide the basis for selection of recovery strategies.• Responsibility for Protective Security within CGI Sweden

Montreal, Qc, Ca

Montreal, Qc, Ca

My tasks comprise large parts of the security area such as carrying out risk analysis, take part in security planning, leading projects to implement changes, follow up and security audits within the organization. Some of my tasks has been / is to:• Create security guidelines and regulations based on the standard IEC/ISO 17799 with the corporate security policy as a starting point.• Design and run a function for monitoring of security information related to the technical platforms used by the organisation.• Design and implement a solution for centralized management of administrator’s accounts and privileges.• Take part in the sales process to present security solutions and to ensure that the security issues are addressed and that the services offered meet the requirements of the customer• Design, plan and carry out a security awareness education covering all employees in the organization based on the security guidelines and regulations

My tasks included:• Building the presales organisation in the Nordic countries• To support the sales people with technical presentations• To lead evaluation projects• Act as security specialist and advisor.

Montreal, Qc, Ca

My tasks included:• Responsible for security in a WAN with a total of 200 corporate customers connected with a total of approximately 65000 clients.• Development, implementing and marketing of network services based on security technologies.• Responsible for development of the company’s Internet related services• Leading a group of technical service managers.

I was working as a security consultant concentrating on technical IT security. My tasks comprised among other things investigations, audits, forensics, threat- and risk analysis and penetration testing. I also took part in larger company wide audits.