IT security consultancy for a Nuclear Power Plant.IT security framework enhancement of a TelCo company.

• Leading the Security management directorate, organizing the tasks, roles and responsibilities of the team• Responsible for decision making and leading the three main security lines of the organization: IT security management, Business Continuity management, Phisical security management• Coordinate as 1st point of contact in IT, IT security and compliance audits (MNB, internal, KPMG, E&Y, Hunguard)• Follow-up and resolve open issues and findings identified through internal and… Show more • Leading the Security management directorate, organizing the tasks, roles and responsibilities of the team• Responsible for decision making and leading the three main security lines of the organization: IT security management, Business Continuity management, Phisical security management• Coordinate as 1st point of contact in IT, IT security and compliance audits (MNB, internal, KPMG, E&Y, Hunguard)• Follow-up and resolve open issues and findings identified through internal and external information security audits• Develop and improve security strategies, framework, policies, standards, regulations and guidelines• Consult, actively participate and lead security related topics for IT delivery projects in information security and data protection topics, such as: Identity management, Cloud deployment for financial data, Anonimization, Frontend development (ebanking), GDPR, Core system deployment, Data warehouse, etc.• Cooperate with external Consultants as required for IT and IT security related topics (Deloitte, KPMG..)• Implement COBIT 5 framework• Incident & crisis management (lead of risk committee, manager of crisis committee) • Identify and mitigate proactively IT security and data protection risks; evaluate IT security risks on a regular basis, create and maintain a risk inventory• Coordinate IT Risk assessments• Create data logging concept and deploy a central logging application (Splunk) • Create Data Ownership concept within the company (lead of the Data Governance Board)• Awareness program organization (BCM, IT security) Show less

• Responsible for the three main security lines of the organization: IT security, Business Continuity, Phisical security• IT security:o access management controlso central data loggingo penetration testing and other ethical hacking tests coordinationo IT continuity (Disaster recovery) testso social media policyo anonymizationo firewall and virus protection ruleso coordination of all regulatory, internal and external (big 4) IT auditso create and… Show more • Responsible for the three main security lines of the organization: IT security, Business Continuity, Phisical security• IT security:o access management controlso central data loggingo penetration testing and other ethical hacking tests coordinationo IT continuity (Disaster recovery) testso social media policyo anonymizationo firewall and virus protection ruleso coordination of all regulatory, internal and external (big 4) IT auditso create and maintain all IT security related standardso data privacy: GDPR project involvement, protecting client data, Data Owner education, data classification consultancy• Business Continuity management:o Business Impact Analysiso Business Continuity Planso BCP testingo Crisis communication plan and testingo Establishing Co-location site• Phisical security: establish, monitor and improve Headquarter’s and Data center’s bank security controlso Turnstyleso CCTV operative controlso physical access management reports Show less