Sinisa Pajevic Email & Phone Number

Vienna, Austria

Providing security governance expertiseConducting risk assessment and vulnerability managementProviding expert opinion and evaluation on security concepts regarding infrastructure and application security topics for Bank AustriaResponse to cyber security threats and incidents, evaluation of UniCredit Group cyber intelligence threat reportsReview of UniCredit Group and Bank Austria security policies and guidelinesSupport for Audit topics related to security findingsSecurity evaluation of third party providers

Milan, Lombardy, Italy

CE & EE Security coordination, steering, and governance.Security Governance: Development of Security strategy in synergy with GISO and fostering the implementation of Security Strategy in CE & EE.Measure and monitor ICT CE & EE Security.Defining requirements and KPIs regarding vulnerability management and penetration testing activities for all CE & EE countries.Checking of vulnerabilities discovered by vulnerability assessments and PEN test activities, giving recommendations, and creation of Action Plans for resolving security issues and mitigating risks.Defining standards and requirements for ATM physical and technical security measures.Defining security requirements regarding e-banking and mobile banking solutions.Evaluation of cloud solutions regarding security requirements.Tracking of and alignment with Audit findings in CE & EE Legal Entities regarding ICT Security.Tracking of cyber-crime and malware campaigns, e.g. spear phishing or e/m-banking threats.Defining requirements and implementation tracking of information security solutions, e.g. antivirus, Advanced Persistent Threat (APT), network FW, Web Application Firewall, IDS/IPS, e-mail GW, proxies, DLP, MDM, etc.Tracking and evaluation of UniCredit Group ICT Security policies and EBA regulations, PSD2, RTS, and GDPR.Defining the requirements and steering of the implementation of Identity and Access Management (IAM) solutions in CE & EE.ICT Security Risk Education.

Vienna, Austria

CEE Security coordination, steering and governance.Security Governance: Development of Security strategy in synergy with GISO and fostering the implementation of Security Strategy in CEE.Measure and monitor of ICT CEE Security.Defining requirements and KPIs regarding vulnerability management and penetration testing activities for all CEE countries.Checking of vulnerabilities discovered by vulnerability assessments and PEN test activities, giving recommendations, and creation of Action Plans for resolving security issues and mitigating risks.Defining standards and requirements for ATM physical and technical security measures.Defining security requirements regarding e-banking and mobile banking solutions.Evaluation of cloud solutions regarding security requirements.Tracking of and alignment with Audit findings in CEE Legal Entities regarding ICT Security.Tracking of cyber-crime and malware campaigns, e.g. spear phishing or e/m-banking threats.Defining requirements and implementation tracking of information security solutions, e.g. antivirus, Advanced Persistent Threat (APT), network FW, Web Application Firewall, IDS/IPS, e-mail GW, proxies, DLP, MDM, etc.Tracking and evaluation of UniCredit Group ICT Security policies and EBA regulations, PSD2, RTS, and GDPR.Defining the requirements and steering of the implementation of Identity and Access Management (IAM) solutions in CEE.ICT Security Risk Education.

Belgrade, Serbia

Main objectives: To identify, quantify, and prioritize risks against criteria for risk acceptance and objectives relevant to the Bank. To provide management direction and support for information security in accordance with business requirements, relevant laws and regulations, and state policy. Managing information security within the Bank. To achieve and maintain appropriate protection of Bank assets. To ensure that employees, contractors, and third party users understand their responsibilities, that they are suitable for the roles they are considered for, and to reduce the risk of theft, fraud, or misuse of facilities by recognizing information security problems and incidents. To prevent unauthorized physical access, damage, and interference to the Bank’s premises and information. To ensure the correct and secure operation of information processing facilities. To control access to information. To ensure that security is an integral part of information systems. To ensure information security events and weaknesses associated with information systems are communicated in a manner allowing timely corrective action to be taken. To counteract interruptions to business activities, protect critical business processes from the effects of major failures of information systems or disasters, and ensure their timely resumption. To avoid breaches of any law, statutory, regulatory, or contractual obligations, and state requirements. Symantec DLP, Symantec Endpoint Encryption, Paloalto NGFW, Fireeye Anti-APT, Bluecoat proxy, Nessus Vulnerability Scanner.Currently on project of implementing requirements imposed by GDPR.

Serbia, Belgrade

Primary functions are to develop and administer system and information ownership; information and data classification guidelines; standards and procedures. Develop, establish and maintain standards, procedures and guidelines to promote the security and uninterrupted operation of computer-based application systems at Victoria Group. Identify and address exposures to accidental or intentional destruction, disclosure, modification, or interruption of information that may cause serious financial and/or information loss to Victoria Group. Responsible for the protection of the Victoria Group assets and information which are processed by or stored in information systems.Specific Duties:1. Manage the information security function in accordance with the established policies and guidelines.2. Establish and maintain information security standards and procedures in compliance with information security and risk management policies, standards and guidelines.3. Function as an internal consulting resource on information security issues.4. Conduct the information security risk assessment program. Review compliance with the information security policy and associated procedures.5. Coordinate information security efforts with the Internal Audit Department.6. Provide periodic reporting on information security issues to the Executive Board.7. Coordinate security orientation and security awareness programs.8. Assist in coordinating contingency plan tests on a regular basis.

Member of South-East Europe Consulting Team

Serbia, Belgrade

Work as Microsoft Certified Trainer for System Engineers and Database Administrators.

Education record

Education record