The radius of my duties is getting bigger and bigger, I will have to update this description later.So far its goes around Datacenter architecture, Fortigate Firewalls, Forticlients, EMS, and interconneciton with other friendly DCs primarily hand in hand with Security Council and ISMS estabilishment and improving Security status quo insude out..

My job is a mission. My target is to provide ever-increasing security processes and technology into the hands of our colleagues and customers in the most seamless and ever-helping way possible.

My assigment in Kiwi.com could not be described by simple itinerary of activities in bulletpoints, it is a Mission.The Mission to develop & deploy measures and tools, monitor and improve level of informaiton security in the company as a whole.

Vulnerability manager (Super-Admin of Qualys VMDR Cloud Guard) enforcing minimum security requirements and supervising patch waves identified in regulatory requirements and internal policy.-0-day Highlights, early warnings and identification of "target areas" using Global IT Asset Inventory filters, prior Qualys QID definitions set.-Leading 11+1 Business Units (Standardizing/Unifying all the settings objects, documenting the changes and leading all the Business Units to "standardized approach" in order to provide quantified status across all the countries and environments.-Assuring appropriate Licensing scheme, eye-keeper of the licenses-Defining KRI/KPI-continuous contact with vendor about tooling strategy, troubleshooting platform issues, escalating cases-continuously providing guidance to all Business Units users (scanners, reporters, managers).-documentation of the process and gapsAcquired Qualys VMDR and EDR certification on 2021Other responsibilities:Web Domain Management, monitoring, group guidance and reporting.-communication registrars across the globe-communicating new regulatory requirements onwards infrastructure teams running DNS.-defining monitoring functions and successfully enrolled Monitoring of all TLD1 domains including DV/EV Certificates.-enrolled all Assets into CMDB and defined process of fully automated control.Participation on Security Incident board evaluating and mitigating "loose ends" of provided RCAs on weekly basis.Providing help with PKI and PCI-DSS requirements and consultation up on request.Holding up process/ticket queue during teams organizational changes natively :)Employee of the month March 2021 for outstanding performance during mitigation of "Hafnium" (Ms Exchange vulnerability).Employee of the month Autumn for participation on "NASA" project supporting PCI-DSS certification in one of entities.

PKI, PCI-DSS, DLP, KPIs, CRM, Audits, Policy, Guidelines, working instructions, constructive cooperation with all stake-holders and process definition.• I do reviews of internal and external (legal and regulatory) requirements in the area of information security together with definitions of appropriate set of IT security requirements applicable across Home Credit Group systems, applications and various environments such as PCI-DSS.• It is my job to cooperate on IT security documentation (such as IT security policy, standards, guidelines, working instructions, best practices and acceptable user baselines) and support local IT security teams in the area of IT security governance as well.• I do Identify and regularly evaluates IT security threats as per Incidents we detect and assure the corrective measures and root cause analysis were appropriate and adequate in order to solve the issue for good.• I do ensure compliance of IT Security documentation together with my colleagues.• I do prepare Used-Cases for new technology we are implementing and setting requirement for “what it should do” what should be the results and actions based on its outputs (such as DLP, SIEM, IDM etc.)• I do provide support and consultation during project activities.• One of my duties is to assure and manage IT security reporting being delivered regarding KPI on a group level together with its evaluation and presentation.• I have to support supervisor during regular Governance calls with countries.• It is my occasional duty in recent months to present Company on Induction days form security standpoint (I have no problem to face crowds from the front-line 😊 so far).• Thanks to my previous career path, I do help to evaluate Network designs, Firewall Flows and HLD design of intended project together with Security Architect as I have wide area of awareness within IT systems, applications and understand “how things work” in general.

Group IT Security Operation Center Team Leader / 1st Line Manager also acting as Major/Critical Incident Manager.EmbedIT is a 100% Czech IT Centre that provides IT services including design and support to Home Credit Group and Air Bank (PPF Group). Our internally designed and developed applications serve over 45 million customers in 11 countries, including Russia and China. Production Services team manages 20 data centers worldwide with a volume of more than 200 million transactions per day produced in network of over 187 thousand points of sale, loan offices, branches and post offices. Our team of more than 800+ professionals is located in 3 Czech cities: Prague, Brno, and Ostrava... read more: https://embedit.cz/AboutI´m Hiring: https://embedit.cz/JobItem/8520