Daniel Serban Email & Phone Number

Bucharest, Romania

Bucharest, Bucharest, Romania

Implement local or group actions and decisions regarding IT Security.Ensuring the reports for the periodic meetings on the IT security area.Identifies, tracks and reports security risks related to the operation of the informatic systems.Participate in active IT classification (according to CIAT criteria)Ensure that the application development process includes security aspects and are correctly integrated in their lifecycle.Carry out control and monitoring activities regarding the implementation of controls.security in the organization.Participates in the creation of the security budget and reports on its execution.Participates in the stability of action plans, contributes and monitors their implementation.Monitors threats and vulnerabilities in the IT security area.Tracks and reports IT security incidents.Participate in regional IT security committees.Promotes the policy and documents associated with IT security,Contributes to IT security awareness campaigns and associated trainings.Assists and advises colleagues and users on IT security issues.Contributes to the definition and improvement of general IT security policies and procedures.Ensuring the administration and operation of the company's security solutions.Participate in IT security projects.Carry out controls within the department in accordance with the Internal Control Planestablished at entity level;Executes any other orders given by the hierarchical superior and the functional superior in the achievement the short-term strategies of the companies within the limits of compliance with the legal basis.DLP ManagerRisk assessment and risk manager responsibilities including support for business risk assessment reviews and coordinationLocal Periodical control manager for IT, Risk and IT Security perimetersIT BCP/DR owner and periodical reevaluation and testingIT Security project CoordinatorResponsible for IT Security Audits and Pretesting processes.CISO position starting with Jan 2023

Bucharest, Romania

Similar position was occupied in a contract for one additional hour for resource mutualization and migration project of IT Security architecture improvement and new deployments, including assets and equipment reorganization.

Bucharest, Romania

Involvement in IS organization, strategy and governance.Implication in Risk management, risk evaluation and monitoringIntegration of security strategy into project based on companies’ risk appetite.Security support (assistance, methodology for risk analysis, solution proposal integrated in business needs)Implementation and operational management of security (SOC, CERT, Vulnerability scan, patch management)Periodical Controls under permanent control requirementsDeveloping and monitoring security operational implementation plansSteering and coordinating security projectsHelping to develop the ISS strategy and participating in ISS governance on his or her scope,particularly by leading the company’s operational security committee.Helping to handle ISS incidents.Coordinating audit plans and developing and monitoring remediation plansAdvising, raising awareness, and assisting employees, project managers, and operations staff on IS security issues.Implementing permanent controls of level 1 and 2.1, defined as being under my responsibility.Management of It Security tools (IPS/IDS, Firewalls, Proxy, Reverse proxy, WAF, Vulnerability management tools, SIEM, etc)Project Implication/Implementation:IPS/IDSNetwork segmentationCyber Crisis exerciseWAF/ Reverse Proxy - A10DLP + Data ClassificationRegulatory MCSI and NBR annually certification of internet exposed payment toolsGroups Information Security Enhancement ProgramRegulatory projects (Regis, Safir, Transfond)SWIFT CSPEmail encryption (Based on Dedicated certificates)Local SOCGroup SOCRegulatory CERTLocal CERTAsset inventory (equipment and software)Administration Bastion (secure administration environment)Security enhancement of VPN connection (physical tokens with Local Certificates for VPN connection)Implementation of new HR toolDeployment of electronic signatureLocal and external Audits and Pentests Regulatory Audits and Pentests

Bucharest, Romania

Verify that personnel, policies, processes, practices and technologies used to protect the Bank against cyber security threats, proportional to information security risk tolerance.Developments and new projects – Security expertise on IT Security topicsSecurity requirements: specification, allocation and assignment of confidentiality, integrity and availability requirements for the Development and Acquisitions of the Bank.Security architecture: development and maintenance of the Bank's security architecture.Information lifecycle.Certification and accreditation: verification and accreditation of new hardware and software systems for production.Digital identity and access to information management.Securing applications Securing systems and networks Securing Information Assets Support for business entities in the process of securing IT assets.Responsibilities for monitoring and emergency response – Monitoring, detection, investigation; Responsibilities on Information Security Governance and Risk ManagementElaboration, implementation and maintenance of an information security, planning and execution program.Identification, management and maintenance of the working tools necessary to implement the information security planning and information program.Communication and reporting (as appropriate) to all interested parties: internal and external.Measuring and monitoring costs, planning and performance in relation to the information security plan.Governance, risk and compliance) Risk management and establishment of an information security risk management strategy, process and program.Governance – supervision of the information security program and planCompliance – ensuring controls to meet legal requirements, regulation, information security standards (MCSI, BNR, PSD2, GDPR, PCI-DSS, ISO 27001, etc.)

Bucharest, Romania

Implementation of IT security policies and information in its area of responsibility Drafting Security FilesAnimating operational meetings on computer and information security and pilotage committees on computer and information security (SSI)Ensures that IT teams provide dashboards with technical indicators and analysis on computer and information security.Ensure the implementation of the security approach taking into account legal and regulatory constraints.Where appropriate, define the security measures together with the business line.Analyze operational security and informational incidents.Business controls: organizes security controls within the business line.Ensure the implementation of audit recommendations on computer and information security.Ensures the existence of application inventory and resources for the computer system and future projects.Inform collaborators to monitor the inventory of applications and resources on its perimeter.Ensure continuous reporting to the ASF of specific activity indicators for computer and information security activities.Ensuring the reporting and completion of KPIs and information security dashboardsIdentify training and awareness-raising needs on computer and information security related to threats in his field.Responsible for creating and verifying reports to official authorities, updating documentation, procedures related to operating processes or those related to the administration of implemented applications.Responsible for updating the documentation of the technical architecture for the computer system implemented within the organization.Suggestions on ways to improve in terms of correcting / preventing all errors detected in the operation of applications.Involved in the preparation of reports or small developments requested by the organization.Reporting to regulators Responsible for IT Risk Assessments and their regular updating.

Bucharest, Romania

Management of the IT network developed in 20 representatives in the main cities of the country, headquarters and secondary offices in BucharestCoordinating the entire IT department of the CompanyVPN configuration and maintenanceVoIP configuration, development and maintenanceManagement of data and voice contractsResponsible partnerships service and equipment suppliersInstallation and maintenance of operating systems and serversInstallation and maintenance of NAS systemsDevelopment, maintenance and back-up databasesDedicated development and applicationsMeasures to ensure the protection of VPN and computer systems- Domain administration, mail, siteAudit InternTraining personalTechnical support of over 200 users