Miloš Savić Email & Phone Number

Belgrade, Rs

London, England, Gb

I support the internal Cyber Risk Assessment program, aimed at managing and mitigating information security risks associated with suppliers, products, transactions, and shared services. My role includes evaluating vendors, IT solutions, and technologies, leveraging my experience in information security audits and consulting.Key Contributions:• Collaborate with IT, Procurement, Shared Service Lines, and Member Firms to implement the cybersecurity risk management program.• Prioritize and assess both new and existing suppliers to identify and manage security risks.• Conduct cybersecurity risk assessments for internal products, services, and third-party suppliers across the network of firms.• Evaluate risks related to transactions, including mergers and acquisitions.• Report on operational risks, including compliance monitoring and risk trends across the organization.• Ensure completeness, consistency, and clarity of data reviewed during assessments.• Produce comprehensive and concise assessment reports, providing actionable insights.• Advise on cybersecurity risk mitigation strategies and track risk trends to support continuous improvement in cybersecurity risk management.

Austin, Texas, Us

As a part of the Information Security Risk & Compliance team, I collaborated across the organization to build and sustain a strong security control framework, ensuring compliance with existing certifications and achieving new ones.Key Contributions:• Third-party risk assessments for identifying and evaluating potential risks and hazards associated with a vendor's operations, products, and potential impact on the organization• Participating in internal and external audits with a focus on SOC2 and ISO27001, coordinating and collating required evidence• Assisting the business to document, assess, and remediate any issues and risks raised during audit examinations• Maintaining and continuously improving security control framework and control monitoring activities• Managing the control library and supporting the business in implementing internal controls• Maintaining handbook pages, procedures, and policies related to security compliance• Professionally handling communications with internal and external stakeholders on compliance issues• Educating control owners on compliance workflows and processes• Identifying opportunities for security compliance control automation• Maintaining security compliance automation tasks• Managed Identity Access Management (IAM) processes using OneIdentity, ensuring secure and efficient access controls across the organization

Westminster, Colorado, Us

I was responsible for delivering effective IT coordination and assurance for all external compliance efforts, involving Global Privacy, SOX, and HIPPA. Furthermore, I am engaged in supporting the team in following information security policies and standards, including revising and addressing questions and managing coordination remediation from internal/external audits and examinations. Also, I am steering a wide range of tasks to make sure all internal functions accomplished strictly adhere to security policies and standards. To understand cyber risk, I am conducting assessments of the IT security/risk posture within the IT network, systems, and software applications. I facilitate GRCS effort to partner with corporate communications to effectively convey awareness messages to employees and contractors for raising awareness.Key Contributions:• Communicated with Global IT security staff to conduct and manage an ongoing company-wide cyber phishing training program to spot and report suspected phishing attempts and protect the company from cybercriminals, hackers, and other bad actors.• Evaluated and mitigated risks by proficiently utilizing IT security risk matrix, such as prioritizing findings, developing mitigation plans, collaborating with stakeholders, and directing remediation activities.• Led vendor/supplier security risk assessments for identifying and evaluating potential risks and hazards associated with a vendor's operations and products and potential impact on the organization.• Designed all aspects of the information security training and awareness program to prevent and mitigate user risk and combat information security breaches.• Determined needs for improvement and opportunities to streamline document remediation process regarding acceptance and mitigation of risk scenarios.

Worldwide, Oo

I was responsible for conducting IT audits for multiple companies in various industries, including banking, insurance, pharmaceutical, investment banking, and air traffic. One of my key responsibilities was to assess and report IT risks and control designed to reduce IT risks to an acceptable level. Moreover, I have developed practices through the utilization of a broad scope of industry knowledge in accordance with the international frameworks and standards (COBIT, ISO27001).Key Contributions:• Tested IT General Controls (ITGC), including access security, program changes, data center, network operations, system software acquisition, change, and maintenance aimed at assuring the secure, stable, and reliable performance of computer hardware, software, and IT personnel connected to financial systems.• Evaluated the design and operating effectiveness of the IT control environment for maximizing the efficient use of resources in business operations and to improve quality, productivity, or competitive positioning in the market.

Bielefeld, Nordrhein-Westfalen, De

In this role, I have collected, organized, and maintained IT information concerning an IT infrastructure as well as delivered user support to fix problems. I have generated user instructions to support users in using a particular product, service, or application. I have administered Windows Server 2012 R2, Databases, and uniFLOW.Key Contributions:• Sustained client infrastructure, such as troubleshooting issues and installing and migrating systems.• Handled server support systems, including Hyper-V, Matrix42, Active Directory, Veeam, Exchange and McAfee to perform restore operations with backups using the information from these backup servers.

Bielefeld, Nordrhein-Westfalen, De