Egill Sigurjonsson Email & Phone Number

Capital Region, Iceland

- Virtual CISO helping clients improve security posture. - Consulting on various security, privacy, and compliance related matters working with client teams to implement and align ISMS and procedures with regulatory requirements and information security standards in order to achieve certification or successful audit. - Help clients improve security posture through technical assessments and various audits.

-Manage ISO 27001 certified information security management system and compliancewith FME/EBA Guidelines, PCI-DSS, and SWIFT.- Determine, monitor, and follow up on risks relating to IT operations and security.- Developed, tested, and maintained business continuity and incident response plans.- Conducted internal audits of the effectiveness of the ISMS and other frameworks.- Managed security training and awareness programs.- Vulnerability detection and mitigation.-… Show more -Manage ISO 27001 certified information security management system and compliancewith FME/EBA Guidelines, PCI-DSS, and SWIFT.- Determine, monitor, and follow up on risks relating to IT operations and security.- Developed, tested, and maintained business continuity and incident response plans.- Conducted internal audits of the effectiveness of the ISMS and other frameworks.- Managed security training and awareness programs.- Vulnerability detection and mitigation.- Vendor management and PCI DSS compliance program.- Manage technical, physical, and environmental security. Show less

Iceland

-Conducting various IT Audits, including performing test procedures on the design and operating effectiveness of internal controls over main business processes through inquiry, observation, examination, and re-performance. -Providing independent and objective assessments of control strengths, weaknesses, opportunities, and threats. Works include external audits, SOC reporting, ISO 27001, PCI, audits on the FSA Guidelines, and software development reviews. -Network vulnerability… Show more -Conducting various IT Audits, including performing test procedures on the design and operating effectiveness of internal controls over main business processes through inquiry, observation, examination, and re-performance. -Providing independent and objective assessments of control strengths, weaknesses, opportunities, and threats. Works include external audits, SOC reporting, ISO 27001, PCI, audits on the FSA Guidelines, and software development reviews. -Network vulnerability assessments, including delivering management reports and using Power BI dashboard reporting to display the discovered vulnerabilities in an easily understandable and readable manner for IT executives and staff.-Performing cyber maturity assessment for in-depth reviews of an organization’s ability to protect its information assets, its preparedness against cyber threats, and delivering management reports with the findings. Show less

Greater Atlanta Area

Worked on a three month, high-urgency logistics project to replace medical devices that were being used to treat and monitor patients with sleep apnea; the devices had suddenly dropped off the cellular network causing loss of monitoring data. My role was to provide tools to track and ensure each device sent out was properly configured and the data from the old devices was available and readible.

Greater Atlanta Area

Information Assurance and Information Risk Management.- Executed testing of clients' internal controls for SOC 1 and SOC 2 reports.- Review and quality assurance of drafted SOC 1 and SOC 2 reports including formatting reports.- Worked with industry leading information security standards and frameworks, including NIST, ISO 27001, PCI DSS, and HITRUST.- Developed an internal dashboard system for the practice to use to gather information on ongoing engagements and monitor key… Show more Information Assurance and Information Risk Management.- Executed testing of clients' internal controls for SOC 1 and SOC 2 reports.- Review and quality assurance of drafted SOC 1 and SOC 2 reports including formatting reports.- Worked with industry leading information security standards and frameworks, including NIST, ISO 27001, PCI DSS, and HITRUST.- Developed an internal dashboard system for the practice to use to gather information on ongoing engagements and monitor key metrics such as realization rates, hour-utilizations, profitability rates and etc.- Created various internal documents for process improvements.- Created testing sheets and document request lists for SOC 1, SOC 2, and PCI DSS reports.- Worked with the engagement managers on clients across different industries. Show less

Roswell, Ga

Customer Service, Sales, Inventory, Club Repair.

Duluth, Ga

Worked as an intern with almost every department in the company, including risk control, risk management, employee benefits and account management. Created internal system dashboards and tools that helped manage operational risks for our clients. Learned the principles of risk mitigation and insurance underwriting.

Johns Creek

Worked various part-time roles at FusionSleep, including data entry, office assistance, office relocation and medical records management.

Roswell, Ga

Master Of Science (M.S.), Information Systems

Bachelor Of Business Administration (B.B.A.), Finance