Johan Sigsäter De Neergaard, Cissp, Cisa, Cism, Crisc Email & Phone Number

Karlskrona, Se

Karlskrona, Blekinge Län, Sverige

Johan works with governance and management within information security. The role entails a variety of interesting assignments, i.e. defining requirements based on ISO 27001/2, MSBFS, PMFS and GDPR, management of steering documentation as well as risk analysis and risk management work.The position also incorporates an operational responsibility towards operations with both information classification training and guidance on security related topics.

Ängelholm, Skåne Län, Sverige

Johan was responsible for Peab's external IT audits and its group-wide compliance with i.e. the company's IT rules and the Data Protection Regulation.Furthermore, his role included developing and anchoring policies, guidelines and routines within IT and IT security as well as continuity planning and data protection for the entire group. Johan have also been a supporting party in matters relating to IT security, both locally and in the context of agreements, as well as regarding license management and license purchases.

Halmstad, Hallands Län, Sverige

Johan's mission has been municipal-wide and concerned governance, management, coordination and follow-up of the Group's information security work.Mission in general:• Responsible for strategic planning and development of goals for the Group's information security work• Preparation of strategic governance documentation for the Group, e.g. policies, guidelines, rules and regulations• Lead, plan and implement information security awareness training for all of the Group's employees• Lead and participate in strategic processes relating to information security classification, risk and vulnerability work, business continuity planning, system management work and target architecture work• Coordinating and advisory function vis-à-vis the municipal administrations and the municipality owned companies• Relate to legislation and regulations, e.g. General Data Protection Regulation (GDPR), the Security Protection Act and the NIS directive• Represent the municipality in regional and national arenas

Stockholm, Berlin, Amsterdam, Hamburg, Gliwice

As Group IT Risk Officer, Johan was responsible for that all risks within Vattenfall IT were monitored and managed.Role responsibilities:• Defining and implementing risk management processes and procedures.• Determination of risk management appetite (e.g. risk thresholds).• Identification of risk to coherent internal IT goals.• Risk assessment associated with events.• Evaluation of risk response.• Priority and planning of control activities.• Regular review and update of risk management plan.• Coordination of risk activities, including IT and Information Security, Enterprise Risk Management (ERM), Internal Audit, Business Areas and External Parties.• Reporting to CIO and ERM.

Stockholm, Berlin, Amsterdam, Hamburg, Gliwice

In the position as IT Security Officer Johan managed the IT/Information security including risk and audits, both internal and external, coordination for an IT department with 600+ international users. Role responsibilities :• Management and planning of IT / Information Security awareness activities.• IT and information security audits of IT systems.• Management and coordination of IT security-related incidents, and exceptions.• Follow-up and monitoring of IT risk and vulnerabilities.• Management and planning of IT audits within the unit.• Establish and maintain a professional relationship with key stakeholders and obtain feedback on security.• Report application security performance and status to IT management team on a continuous basis. • Coordinate and follow-up of IT security steering documents including policies, instructions and guidelines. • Steer and coordinate a group of “IT Security Coordinators”. • Management of tactical plans and the IT security roadmap.• Support projects in security related topics, e.g. evaluating on premise and cloud solutions, assessing pentest reports, draft security requirements in sourcing initiatives etc.

Ringhals Väröbacka, Berlin, Copenhagen, Amsterdam, Paris

Johans main responsibilities was in IT security where client and server issues concerning antivirus, user access, encryption and VPN were managed. In addition he created and maintained Company wide AD group polices. On occasion Johan also trained colleagues in security awareness. Johan represented his office in an international security group concerning client security issues. He has also been in charge of IT operations for Vattenfalls head offices in Paris and Brussels. During a longer period of time Johan lived and worked in Berlin and Amsterdam via Vattenfalls internal job rotation program.

Gothenburg, Sweden

• Service support (ITIL Incident & Problem management)• IT-guidance

Ed

Bachelor Of Science

Education record