Lukas Napravnik Email & Phone Number

Overall responsibility for information security across a diverse group of over 60 legal entities.Key Responsibilities:Strategic Security Leadership: Development and implementation of the security strategy in line with the organisation's risk appetite and regulatory requirements.• Security Governance: Oversee the establishment and continuous improvement of security governance frameworks, policies, and procedures across various information security domains, ensuring consistency and compliance throughout the organization.• Risk Management: Identify, assess, and manage information security risks, employing proactive measures to safeguard the organization’s assets against evolving threats and vulnerabilities.• Cultural Transformation: Drive group-wide initiatives to embed a risk-aware culture, promoting awareness, education, and ownership of information security across all levels of the organization.

Prague, Czechia

- Definition and planning of Information Security Strategy - Security oversight role covering Information Security, Operational Resilience and Physical Security domains.- Acting as advisor to CEE entities, management and IT teams in security related matters. - Key areas of focus:• Information security processes and controls• SSDLC • Security Risk Management • Security Incident Management• Security Awareness• Vendor Risk Management

Responsibility for:• Information Technology and Cyber Security (Amazon Web Services, G Suite)• Risk Management and Compliance• Finance

Auckland, New Zealand

Delivering projects in the following areas:• Information security processes and controls• Information security policies and governance• Security configuration of OS and databases• Cyber security• Data loss protection• Service level management

Prague, The Capital, Czech Republic

Responsibility for IT security and risk management governance including:• Development and update of information security strategy• Definition of information security policies and procedures,compliance monitoring• Reporting of IT related risks to C-level management and BoD• Business continuity management• Performance of security assessments and risk analyses • Handling of information security incidents• Information security awareness

Prague, The Capital, Czech Republic

Delivering and managing audit & advisory projects in the following areas: ● Information Security Processes and Governance ● IT strategy assessments and reviews ● Implementation of policies in compliance with ISO 27k ● Process & controls optimization ● Delivery of technical trainings (Project Management, CISA preparation)Managing project teams and project economy.

Czech Republic

Tachov