Lorenc C. Email & Phone Number

Ottawa, On, Ca

Ottawa, Ontario

• Review and update policies and procedures to maintain with regulatory and industry standards• Ensure compliance of (Microsoft Azure) cloud services and products with client requirements and company security policies• Conducts periodical and ad-hoc assessments/audits on Information systems to ensure compliance to internal regulatory framework and industry standards (SOC, SOX, ISO27001)• Provides valuable compliance advice to the business unit management regarding strategies, programs, policies, controls, and procedures.• Maintain, update and administer BCP/DR documentation and testing• Performs infrastructure and application vulnerability scans across public and private networks• Plan, design and conduct risk management processes; review and update policies and procedures to maintain effective risk control environment• Manage vendor risk management processes and due diligence reviews - SIG/Shared Assessments; assess third party risk and report outcome to senior management• Complete due diligence analysis for new clients by completing assessment questionnaires and providing supporting documentation• Organize and lead cloud organization security meeting

Tirana, Albania

• Led and participated in requirement gathering and analysis. Ensured information, information security and information technology control programs and work practices complied with company's business strategy, policies and procedures as well as internationally recognized standards (ISO27001, PCI-DSS and best practices• Monitored industry trends, IT best practices and industry standards to ensure continuous optimization of IT service delivery. Continuously monitored OWASP for latest security vulnerabilities• Investigated information risk and vulnerabilities and recommended real action plans• Ran periodic IT compliance and IT governance assessments• Supported audit team by performing data manipulation by extracting data running SQL queries on the core banking system database and transforming them into a more user-friendly format; MS Access, MS Excel• Conducted reviews to assess quality assurance practices, software products and information systems and made recommendations for changes to the core systems• Advised senior management on information security and technology investmentKey Accomplishments:• Recommended the allocation of a specific budget for the Information Security Office as well as the participation of the IS Officer to the IT and Project Steering Committee to ensure that all IT related decisions and projects follow the institution Information Security Framework• Recommended the implementation of a company-wide ticketing system to administer the IT Department support provided to the bank staff. As a consequence, this enabled the Bank Senior Management a tool to assess the IT quality of service• Drafted the IT Audit Methodology

Tirana, Albania

• Technology Advisor/SME to the CEO. Provided Information Technology analysis and research to ALSE management into identifying information systems• Evaluated business needs vs. vendor offering as well as infrastructure requirements• Provided guidance and feedback on technology requirements, international standards and best practices on two stock exchange systems from EU and Dubai vendors• Contributed in development of regulatory framework for Information Security and Technology

Tirana, Albania

• Designed and implemented a secure, robust and capable security environment for the Bank by managing firewalls, antivirus servers, normal and power users access monitoring, log collection and analyzing, proxy servers – Microsoft ISA Server / Microsoft Forefront TMG. .• Supervised and monitored Identity and Access Management systems of the bank – Microsoft Active Directory and IMB iSeries (AS400)• Increased user awareness by preparing information security training materials and running training classes• Worked closely with Infrastructure Team on a daily basis to manage and improve network security, operating system security, Internet/web security, DLP, anti-malware, IDS/IPS, penetration & vulnerability testing, cyber security from both internal and external threats• Addressed IT risks and administered the IT risk assessment process of the bank• Developed architecture documents (like data flow charts, information systems relation diagrams, CMDB). Contributed to the design and implementation of the Disaster Recovery Solution• Created, implemented, and updated information security standards and policiesKey Accomplishments:• Completed Business Impact Analysis process, BCP and BCP testing to ensure bank compliance with regulatory requirements• Built the Incident Management framework. Led the Incident Response Team. Documented and reported to security committee

Tirana, Albania

• Managed operations of Telephony department for the residential, business and interconnection clients• Established policies concerned with the development, operation and maintenance of telecommunications services and products (existing and proposed new ones)• Designed and implemented custom made solution based on linux open source software• Directed a small and dedicated technical staff in order to control telecommunications traffic volume and flow• Recruited personnel and trained new staffKey Accomplishments:• Led the team as well as designed, trained and implemented a solution to integrate all information systems of the company (being CRM, ERP, billing platform, service provisioning, etc.), saving the company 150'000 CAD. This was a custom build application which integrated into existing COTS products. • Designed and implemented a solution based on open source application to handle interconnection traffic, saving the company 40,000 CAD in CAPEX as well as around 8,000 CAD/year in licenses and support• Created Data warehouse environment and sanitized and migrated all data (Big Data) into the new DW.

• Analyzed user's requirements, and designed and developed system architecture and specifications• Designed and implemented communication system network architecture• Implemented Active Directory, Terminal Services, Anti-virus, Servers and Mainframes (Blade servers)• Implemented country-wide IP telephony system that included billing system, and connection with several public providers (POTS and GSM)• Provided 3rd level support to end users• Prepared training materials and trained both police officers and technical staffKey Accomplishments:• Participated in the team that designed and implemented the Total Information Management System (TIMS) for the Albanian State Police, one of the European Union requirements for Visa liberalization for Albania