As part of team that handles cyber related incidents and emergencies, my responsibilities include, but are not limited to:• Investigation of cyber security alerts• Managing cyber security incidents through the whole lifecycle, including communication with stakeholders, impact assessment, mitigation and reporting• Monitoring, reporting and mitigation of critical vulnerabilities• Blue/purple teaming• Occasional rogue pentest• A bit of other stuff here and there, like JIRA sysadmin & project management

Working in the Information Security Governance & Risk group. Sitting in an office full of IT engineers and Windows admins allows me to gain a deeper understanding of the (many) technical issues. This means I can divert from the traditional paper pushing security to something more technical.My responsibilities include the following:• Application risk assessment - risk identification and quantification in a way that can be presented and understood by the shareholders and design of mitigation measures.• Firewall request security exemptions• Contribution to creation of internal security standards.• General security advisory and security standards interpretation to anyone who is willing to listen.• Occasional rogue pentesting and vulnerability reporting.

Working as a consultant in the Technology branch of Management Consulting department. My area of focus include Information Security, Data Privacy and Enterprise Architecture. During my work, I have participated on the following projects:• ISMS implementration in a SCADA rich environment. The hardest part was to convince the system owners, that the SCADA is not extemp from security. • GDPR IT impact and risk analysis for a large public institution and a major insurance company. First GDPR projects undertaken by Czech KPMG office, which helped us to develop and improve the methodology for future deliveries.• Information security health checks (both ISO 27000 and ZKB), gap analyses, improvement formulation and general security advisory for public institutions, banks and software vendors, as well as full ISMS implementation. Helped me to learn what are the DO(n't)S in general IT.• Enterprise Architecture advisory for Czech military. I learned that war is just a business interface.• Analysis and technical POC for data migration from a major COBOL (yes, COBOL) mainframe application to an open platform. A very interesting foray into what can only be described as data archæology.• Application portfolio security assessment in an international pharmaceutical company. Helped me understand the inner working of a large corporate IT and at the same time improved my pigeon English.• AQR audit of a major bank, which exposed me to the unfathomable details of accounting.• Last but not least, many minor tasks which involved solving technically challenging issues using programming tools like VBA and Visual Studio.

Independent research of nanotechnology for fuel cells applications.Also gave me an invaluable experience on how to survive in an alien environment.