Marc Ouwerkerk Email & Phone Number

Voorburg, South Holland, Netherlands

Amsterdam, North Holland, Netherlands

Working directly for the CISO, I manage a small team that isresponsible for:1. Supervising security inspections by regulators, including coordinating follow-up on findings.2. Coordinating the implementation of security measures resulting from new legislation, such as the Telecommunications Safety and Integrity Regulation (Rvit) and NIS2, for the applications and network elements in scope.3. Perform security assessments on key applications and network elements.

The Hague Area, Netherlands

I organize and execute audits, aimed at providing assurance to the Board of Management. I have executed the following projects:- Implemented the RVIT legislation at KPN during a 2 year programma with multiple teams and managed the inspection by the regulator, resulting in minimal findings.- Initiated and executing a project to test all high risk websites within KPN on vulnerabilities and monitor the follow up of the improvements.- Security Incident response for several major incidents within KPN and its subsidiaries, thereby providing assurance regarding the incident response and follow-up.- Provide assurance to the BoM and audit committee about the financial, compliancy and security in control statement of the network and IT operations department. Also provide assurance about the security of all departments. - An audit on the Public Key Infrastructure of KPN to assess if the received assurance was in line with the security requirements of KPN.

Netherlands

From 2005 to 2008 I was active with my own company, with the main focus on consulting in the ICT security. My specialties are managing complex security projects and legal hack tests. The security projects include designing secure infrastructures, implementing security based software, define the security aspects for projects and security audits such as legal hack tests and code review. I can draw from my extensive experience on several platforms (see below) and my auditing and security background. The customer base consists of (Dutch based) multinationals, Ministries and banks.

The Hague Area, Netherlands

I organized and executed IT audits, aimed at providing an independent and impartial assessment of the quality of the automated information systems. I performed information security audits and privacy audits and participate in teams to audit financial information for management, human resources, grant providers and others. Furthermore, I gave advice in major change projects, such as a shared service centre and centralization of human resources.Projects included:- Designing the security standard- Audit on the financial systems- IT security and privacy audits- Audits concerning standards like Prince2, CobiT, ITIL- Legal hack tests- Advice about tactical and strategic choices- Data analysis

Delft Area, Netherlands

As a security consultant our projects consisted of auditing IT networks and software for security and privacy aspects. These projects can be as versatile as a code review, a penetration test of a web site, war-dialing or supervise a development project with relation to the security aspects. As head of the level 3 support group, I was responsible for testing new functionality & patches and solving complex problems for customers. We were the go-between between other support engineers and the customers on one side and the engineering department on the other side. The level 3 support engineer has a working knowledge of numerous platforms that are supported by Consul InSight and the Security Event Module especially in the field of auditing and the analyzing of log files.I also developed and maintained a web-based uptime and vulnerability analyzer.

Saudi Arabia

I was stationed at Saudi Aramco, the Saudi Arabian state owned oil company through Moammar Information Systems. At Saudi Aramco I started the department that would be responsible for the implementation and management of the InSight Security Manager suite. My work entailed the installation of the software, getting the Saudi Aramco employees acquainted with the software, the development of the procedures for the auditing department and the instruction of the end users, such as the auditing department and the system administrators.

The Hague Area, Netherlands

The fully owned subsidiary of the Dutch postal group (TNT) supplies personal information for marketing purposes. The databases containing this information are managed through front-ends written in Delphi, C++ and VB. My responsibility was to ensure that the internal customer demands were met with the already existing and new applications.

The Hague Area, Netherlands

Design and implement applications for environmental acoustics and building physics. I was solely responsible for the calculation module of the main product, GeoNoise.

Post-Master, Data & Business Analitics

De eenjarige opleiding Data & Business Analytics is het toonaangevende programma voor Data Scientists die tot de top in hun veld willen.

Emita (Re), Post-Master It Auditing, Amply Sufficient

This two year course provides the opportunity to be admitted as a chartered EDP auditor. The program provides a basis for assurance in IT.

Postgraduate Bachelors, Object Oriented Software Design

Software development through Object Orientation and implementation with Java. The course addressed the fundamentals of Object Orientation.

Postgraduate Bachelors, Higher Environmental Noise

Regulations and methods, including scientific and mathematic background of environmental noise and building physics. The course focuses.

Bsc, Applied Physics

Major in Applied Physics which is an area of study that is concerned with both the search for new scientific techniques and methods.