Karel Koster Email & Phone Number

Amsterdam, North Holland, Netherlands

Amsterdam Area, Netherlands

Leading a global team of Information Security Analysts and Advisors within the FedEx Express Int. Responsible for implementing, maintaining and executing several GRC processes, such as Vulnerability management, Information security assessment, Customer Assurance and Cloud governance within LAC, EMEA and APAC for FedEx Express Int.

Amsterdam Area, Netherlands

As the Head of Information Security I was responsible for all Information Security areas of Ingenico ePayments GlobalCollect Platform and its affiliated entities. I oversaw and coordinated information security efforts across the company in order to safeguard the company’s assets, infrastructure, intellectual property and business continuity. I managed the ISM team of ePayments North campus and was responsible for embedding security within Ingenico ePayments North Campus managed development and service delivery platforms.

Amsterdam Area, Netherlands

In my current role I am liaison between the information security group, IT and business architects. My tasks and responsibilities include:- Developing and maintaining physical and logical information security architectures, as well as standards, principles and services, inline with PCI-DSS and applicable privacy laws and regulations;- Developing and implementing security architecture roadmap;- Information security representative within strategic IT programs within the Ingenico group. Therefor liaising between the program stakeholders and the various CISO's within the Ingenico group;- Serve as information security expert in: application development, database design, network and operation system security design and control development;- Develop and provide implementation guidance on information security business, functional and non-functional requirements for all IT projects;- Manage and execute information security improvement projects such as identity and access management, secure software development and tokenisation.

The Hague Area, Netherlands

Tasks and responsibilities were:• Maintain information security governance and reporting on information security towards executive board;• Information security risk analysis and tactical advise for Aegon executives and directors;• Manage and coach internal and external information security personnel, such as security managers, interns and contractors; • Design and implement information security policies and controls compliant with Sarbanes Oxley (SOX), ISAE3402, DNB and other regulations;• Manage strategic and innovative security improvement programs such as BYOD security, web application firewalls security, penetration testing processes, secure coding processes, identity access management systems;• Design, implement and maintain the information security incident management program;• Design and manage IT vulnerability management program;• Implement information security management within Aegon corporate headquarters;• Design and execute information security awareness program;• Review, monitor and support strategic IT programs.

The Hague

The scope of this role covered the following Aegon NL departments: Asset management, HR, Finance, Legal, IT, Facilities. Tasks and responsibilities included: • Advice on and implementation of operational risk and information security controls;• Assess whether business units comply with information security and risk policies by testing various controls;• Implement, test and monitor SOX and SAS70 process controls;• Design and maintain business continuity plans for all critical business processes;• Provide operational risk and information security advise to directors;• Risk, security and business impact assessments.

As a consultant I worked on project basis for several clients. I advised on, designed,implemented and secure WAN/LAN network infrastructures. Some examples of project:- Design and deploy a centralized managed WIFI network over 15 offices in 10 countries inNL for a US pharmaceutical company. Decentralized rollout by local IT staff, highly secured and centrally managed from Headquarters;- Designed the network segmentation for a pharmaceutical production plant. Segmentedthe production, quality control and back office network is a way that information could onlyflow from production, to quality control and then to the back office but never the other wayaround;- Designed and implemented a high secure computing zone using firewall, IDS/IPS sensorsand centralized monitoring of all network and server logs.Covered areas of knowledge: switches, load balancers, wireless networks, routers, networksegmentation, MPLS, DNS, (virtual) firewalls, IDS/IPS, tcp/ip, server hardening, proxy servers,logging and monitoring, VPN, PKI infrastructures, spam/content filtering, multifactorauthentication.

In this role I implemented and secured network infrastructures for several clients by installing and configuring switches, routers, firewalls and proxy servers.

Deployed by Wortell as an IT contractor I performed various roles at a diverse range of clients: support engineer, Microsoft and Novell system administrator, project manager, college professor and IT manager.