Bence Borókai Dr. Ll. M. Email and Phone Number

Task, responsibilities:• Manage the whole staff of the SOC (ranging from entry-level SOC analysts to subject matter experts• Create and develop core SOC functions such as threat intelligence, brand protection, 24/7 incident monitoring capabilities• General oversight of organizational-related tasks including facility development, daily activities, training, ensuring compliance with legal requirements and international standards, • Strandardize POC and procurement processes, manage annual budgeting and forecasting• Creating group-level cyber security incident management regulations Key project:a. Lay the foundation for SOC as a Service through design the business model, contractual background, and pricing model b. Implementing ITIL processes

Task, responsibilities:I. Co-manage staff of 8, creating KPIs and coordinating the group's daily workII. Enhance the Bank’s IT security governance-related ecosystem such as regulations, risk management, audit, and awareness.III. Leading the subsidiaries in IT Security projectsIV. Validate IT Security technologies and processes of the OTP Group,V. Ensuring that the subsidiaries' IT Security functions meet quality standardsKey project:- Leading foreign acquisitions from IT security point of view (Serbia, Slovenia, Albania, Moldavia, Montenegro, Bulgaria)

Tasks and Responsibilities:- Developed and maintained the company’s data protection lifecycle, conducting and reviewing data protection impact assessments.- Led privacy risk assessments and implemented mitigation strategies.- Reviewed and validated contracts and policies related to data privacy.- Assisted with external audits and certification processes.Key Project:- Developed and implemented a company-wide data management register.

Key Responsibilities:- Assessed multiple organizations for compliance with regulatory requirements and international standards, such as GDPR, Ibtv, and ISO 27001.- Provided advice on legal matters related to IT security.- Developed and implemented IT security policies and procedures.- Established a methodology based on GDPR.- Evaluated the IT security maturity of organizations across different sectors.- Supported and developed customers' IT security awareness programs.