Jesper Andersson Email & Phone Number

Stockholm County, Sweden

Solna, Stockholm County, Se

Jesper strengthens the start-up with information- and cyber security knowledge to build a secure product and IT operations environment from scratch. He is also building the required information security organization, processes and tools, to align risk management with business and to ensure compliance with GDPR, ISO27001, EIDAS and CIS

Stockholm, Stockholm County, Se

Founder of a leading company in information- and IT security services.

Founder of a leading company in information- and IT security services.

Stockholm, Se

Solna, Se

Stockholm, Stockholm County, Se

Jesper is establishing information security practices such as CIS framework for security controls, Gartner maturity scores and KPI to measure maturity progress, risk management frameworks and roles and responsibilities regarding information security. The strategy is to align Defentry with ISO27001 when required by the business.Jesper also guides Defentry with IT architecture and efficient use of cloud services as well as security maturity audits and strategies. Advising on organization IT security operating models for secure and cost-efficient businesses with limited turnover but large customers.

Stockholm, Se

As CSO in banking, Jesper laid the groundwork for a new and cost-efficient 1st/2nd line security organization that seamlessly integrated physical security, information security, cyber security, and security operations. His hands-on approach involved defining the organization's services and delineating roles to ensure optimal support for IT and business operations. His eye for talent acquisition allowed him to identify and recruit skilled personnel for the new roles, both internally and externally.Acknowledging the importance of effective succession planning in a time-boxed assignment, Jesper ensured smooth leadership transition by recruiting a replacement to take over the CSO position permanently. An essential part of his responsibilities entailed developing a robust framework and strategy for managing a variety of audits - internal, external, and regulatory - as well as risk management and new regulations. These facets were efficiently integrated into the security organization through new process implementations and introduction of an ISMS based on ISO27000, to which other standards and regulations were mapped to, to ensure low operating cost for such activities.As an established leader in security initiatives, Jesper was at on the forefront of significant projects, including a security log project and the implementation of Digital Operational Resilience Act (DORA). In parallel, he served as the Enterprise Security Architect, lending his expertise on key endeavors such as migration to Microsoft 365, modernization of the workplace clients, secure networking, usage of cloud services, and ensuring compliance with ISO27000 and GDPR standards.Jesper's involvement extended to participating in business continuity exercises and articulating the security posture and events to the bank's management team and board members.

Stockholm, Stockholms Län, Se

Jesper supported IT and business with cyber security strategies and tactical solutions in their high paced cloud transformation journey from on-premise datacenters to fully utilizing cloud services and cloud infrastructure, to enable a quick time to market, low operations cost and easier compliance fulfilment of regulations such as ISO27001, EBA guidelines BS 2019, NIS directive, GDPR etc.He educated the organization and guided it in Schrems II and how to manage compliance risks related to GDPR.

Stockholm, Stockholm County, Se

Jesper was acting CISO for Aspia, accountable for Aspia’s information security and IT security. He was guiding the organisation in utilising DevOps CD/CI and cloud first strategies with cost efficient security in compliance with ISO 27001, PTL/AML and GDPR regulations.To enable new business segments and to comply with regulations, Jesper lead and architected the security perspective on Aspia’s roles and responsibilities, policies, processes and IT architecture in Azure and SaaS solutions, to ensure that Aspia has a risk balanced security as well as cost efficient technical environment and operating processes.

Stockholm, Stockholms Län, Se

Jesper was the security architect in a strong authentication design- and implementation project, driven by EBA and GDPR requirements. The project architected a new fit-for-business IAM solutions for all staff. He led the IT environment readiness investigation and the work on how technical integrations with key systems and heterogenous platforms integrate with the new IT architecture, ensuring security requirements (based on ISO27001 and ISO27002) are cost-effectively met tactically and strategically.

Stockholm, Stockholms Län, Se

Jesper lead a security audit and remediation activity of the bank's external systems integration infrastructure. The investigation identified the confidentiality- and integrity posture by analysing technical controls, organisation and processes around cryptography lifecycle management, access control, intrusion detection and traceability. He identified business risks, constructive improvements and established updated and new processes for IT and business on how to work more efficiently externally with critical information. Jesper reported to CIO and CISO.

Stockholm, Stockholm County, Se

Jesper managed an infrastructure project in developing a secure enterprise infrastructure to provide local Internet breakout from offices. Jesper was responsible for IT security architecture, project management and stakeholder communication. He created a threat model for the deliverables to address as well as approved requirements and a security architecture roadmap to support H&M’s cloud first strategy using Azure

Stockholm, Stockholm County, Se

Jesper was the operational and strategic IT Security Architect, maintaining and developing IT security architecture strategy and framework aligned with DevOps and rapid deployments in Azure, in close collaboration with IT Enterprise Architecture. He also guided projects and IT operations in information- and IT security alignment with ISO27001

Major assignments:Cloud Enablement - Project Lead and Project Security Architect, H&MEnterprise IT Security Architect, H&MDisaster Recovery Readiness, Swedish PoliceAuthentication and Authorization Infrastructure, Swedish Police

Stockholm, Sverige, Se

Jesper was responsible for ensuring CIA requirements, compliant with organisation internal FAPS and MSB recommendations, were identified and fulfilled as well as guided solution design in a disaster recovery readiness project at a Swedish government agency

Stockholm, Sverige, Se

Jesper was responsible for leading, architecture design and implementation of new IAM infrastructure and processes for the entire agency. Jesper was the head architect and project lead for a 24-month project involving 15 people. The assignment was to design new client-server architecture IAM strategy and implementation to ensure that users are strongly authenticated and can only access authorized resources in bespoke Java applications and off-the-shelf applications. Auditing of user activities on the network and servers was key. Jesper was also acting team lead in the IAM department.

Montreal, Qc, Ca

Major assignments:Authentication and Authorization Infrastructure, Swedish PoliceSecurity Auditor, Ericsson

Kista, Stockholm, Se

Jesper performed a revision of the organisations network domain, client-side security and product portfolio. He created an IT security strategy for developing those areas. The review entailed disk encryption, entropy analysis and client network design. It resulted in many security leaks and misconfigurations being identified and major license cost reductions. The security department was educated and a governance strategy was drafted.

Stockholm, Stockholm, Se

Responsibilities: Build a development department by defining work processes and recruit correct talentsCreate a system architecture for a new secure and storage optimised storage productGenerate requirements according to market needs and business strategyCreate a security architecture based a threat analysis that also was developedLead the development team

Austin, Texas, Us

Responsibilities:Line manager for a development team of 10.Leading a project team of 12 in design and implementation of a next generation FIPS 140-2 level 2 hardware security module (HSM).Developed the project management model further and improved a 3 year project progress by 6 months.

Company was bought by Thales in Oct 2008.System architecture responsible.Lead a development team of 7 in development of current generation key management system.Lead integration with Microsoft SQL database and traditional backup systems in an international project.Developed systems integration certification tools and process.

Se

Major assignments:User management, FoxT SecurityResponsible for creating an architecture design for a user IAM system in a heterogenous environment and to create a proof-of-concept. Software Development, bwin GamesSecure client development. The assignment was focused on development tools and techniques to increase the quality of the product and security awareness, thereby reducing risks. The project also included crypto implementation analysis and product market distribution design and implementation, enabling new product distribution channels.

Gb

Responsibilities:Migration business data from local Microsoft SQL databases to a centralised national database.

Company name aka TFS Technology, FoxTechnologies and FoxT.Responsibilities:Lead a development team of 7 for an identity and access management and data encryption client for Windows.Project manager for projects of 3-12 months length, with sustained delivery capacity during downscale of the development team.Line manager responsibilities.Managed the support for a vertical customer segment, government and manufacturing sector.

Burlington, Massachusetts, Us

The Swedish development company was bought by Fox Technologies in 2002.Responsibilities:Developed penetration testing process and methodologies.Performed penetration tests.Developer of an identity and access management and data encryption client for Windows.

Master Of Science, Computer Science

Education record