Ivan Roth Email & Phone Number

Leading Information Security IT Governance, Risk management and Compliance functions.

Responsible for: ISMS under ISO 27001 Certificate, SOC 1 Type 2 Report (ISAE 3402 / AT-C 320) with additional Operational controls, IS policies and maintaining HIPAA compliance.Conducting Internal and External Audits.Personal and Data privacy compliance in collaboration with DPO, adding assurance with the GDPR(EU), CCPA(US), FADP (CH). Maintaining agile, scalable and efficient Governance, Risk and Compliance (GRC) unit under the realm of CISO and CFO.

• Ownership of Business applications and relevant projects.• Manage and monitor the technical application security as part of Information Security Management System certified (ISO27001), and ensure adherence to the governance policies.• Assisting and reviewing business requirements to ensure appropriate solutions are formulated and purchased to support the business needs in best manner.• Review of application designs, concepts to ensure conformance with ISMS.• Participating in… Show more • Ownership of Business applications and relevant projects.• Manage and monitor the technical application security as part of Information Security Management System certified (ISO27001), and ensure adherence to the governance policies.• Assisting and reviewing business requirements to ensure appropriate solutions are formulated and purchased to support the business needs in best manner.• Review of application designs, concepts to ensure conformance with ISMS.• Participating in the preparation and execution of Internal and External Audits of NS IT.• ITIL process control internal and with Vendors as per actual SLA.• Manage Software support (Supplier Management) associated with all types of assets• Lifecycle Management for all in use business application.• Vendor management, managing and supervise 3rd party supplier to ensure the observance of Service Level Agreements.• SLA annual verification, KPI control as part of NS IT Service Management.• Budgets responsible for the business applications. Show less

Zurich

Responsible and accountable for availability of Document Management System, leading onsite and offshore team to fulfill business requirements assuring quality of service. Leading IT Problem Management based on ITIL.

Zurich

• Establishing, implementing, operating, monitoring, maintaining and improving information security, based on business risk approach.• Providing compliance and assurance services.• Managing compliance and assurance activities.• Ensuring delivery of service in line with security policy.• Involvement in and coordination of internal and external security audit activities.• Managing compliance failures in accordance with the clients requirements and services.• Coordinating… Show more • Establishing, implementing, operating, monitoring, maintaining and improving information security, based on business risk approach.• Providing compliance and assurance services.• Managing compliance and assurance activities.• Ensuring delivery of service in line with security policy.• Involvement in and coordination of internal and external security audit activities.• Managing compliance failures in accordance with the clients requirements and services.• Coordinating security compliance and audit failure resolution with appropriate contracts and action plans.• Leading the design, implementation, operation and maintenance of the Information Security Management System based on ISO/IEC 27000 series standards, including certification against ISO/IEC 27001 where applicable.• Leading/commissioning information security risk assessments and controlling selection activities.• Delivering services on time in order to meet and exceed SLAs.• Managing escalations, incidents and complex problems. Show less

Zurich

• Responsible for managing resolution of major incidents.• Ensuring Problem and Situation/Incident Management activities are carried out according to regional guidelines and results are delivered in accordance to the KPI’s and SLA’s.• Introduced and coached new team members to the Situation Mgt role.• Leads a team to execute and implement the service to the highest quality and competency standards. Acts as the key point of contact on all incident management-related matters. Liaises… Show more • Responsible for managing resolution of major incidents.• Ensuring Problem and Situation/Incident Management activities are carried out according to regional guidelines and results are delivered in accordance to the KPI’s and SLA’s.• Introduced and coached new team members to the Situation Mgt role.• Leads a team to execute and implement the service to the highest quality and competency standards. Acts as the key point of contact on all incident management-related matters. Liaises with service management to assess the impact of major incidents on the service.• Worked with technical support teams to investigate a wide variety of problems, ranging from order input errors to major system failures.• Ensured problems are resolved within agreed Service Level Agreement timescales.• Participated in problem reviews conducted by Problem Management or Support Teams on involved incidents.• Provided on call management cover for production systems.• Providing a communication to all necessary business and IT executives. • Acted as a focal point for problems including being the first point of customer escalation from the IT Service Desk and additional support teams.• Attended weekly Change Advisory Board meeting to report on change related problems managed and to provide input for upcoming changes.• Involved in various projects in Europe from Incident/Problem/Change Service Management perspective. Show less