IT Security Consultant

Uchádzač je skúsený manažér bezpečnosti IT, ktorý pracuje v oblasti bezpečnosti IT od roku 1994. Náplň práce ho zaujala najmä kvôli procesom, ktoré sú podľa jeho slov trvácnejšie a náročnejšie ako technické veci. Na svojej poslednej pozícii pracoval na budovaní bezpečnostného pracoviska, ktoré bude slúžiť všetkým pobočkám spoločnosti na celom svete. Pracoval aj na budovaní systému diaľničného mýta, kde zabezpečoval používanie platobných a tankovacích kariet. Najzaujímavejšie sú pre neho projekty, na ktorých predtým nepracoval, pretože sú pre neho najlepším zdrojom skúseností a poznatkov. Zaujímajú ho najmä bezpečnostné procesy a audit. Je jedným z hlavných predstaviteľov Slovenskej republiky v oblasti tvorby noriem ISO.

2006 to present: CEO, Security Consultant, Security Manager. Obtained CISA certification in December 2006, PRINCE2 Foundation certification in January 2010, and CRISC certification in May 2011. Currently preparing for the CEH exam in 2021.

2019 - 2021: Worked for 18 months as a full-time employee. Implemented an incident management process and security operation center for handling security incidents 24x7 for all subsidiaries and production plants worldwide. Updated existing process documentation and aligned it with ISO standards.

2016 - 2019: Worked on a project for 30 months as a full-time employee. Analyzed, described, and documented security processes to comply with ISO standards. Established IT risk management and internal audit processes for information security management system (ISMS).

2015: Worked on a project for 3 months as a part-time employee. Conducted risk analysis and provided recommendations for policy, procedures, and information security processes.

Worked on a security project for 6 months as a part-time employee. Updated existing security project, implemented new security policies and procedures, and integrated them with IT services based on ISO/IEC standards.

2012-2014: Worked on the Testa-NG project for 6 months as a full-time employee. Developed an encrypted network for the European Parliament. Responsible for defining, describing, and documenting the encryption process and security dependencies.

Implemented PKI for railroad tickets distribution for 3 months as a part-time employee. Developed policies, procedures, and work instructions based on ISO/IEC standards for the Railroad Company.

Conducted internal audits for information security management by ISO/IEC standards for 2 months as a part-time employee. Defined the scope of work and created a roadmap for certification process for ISO 27001.

Worked on capacity and availability management for 2 years as a full-time employee. Defined processes and operated them in the factory production environment.

Conducted internal audits for IT service management by ISO/IEC standards for 3 months as a part-time employee. Supported the certification process for ISO 20000 and built an integrated management system for ISO 9001, ISO 20000, and ISO 27001.

Provided consultation for process definition, implementation, and documentation for ISO 20000 certification process for an IT service provider. Developed a methodology for risk management and procedures for risk assessment.

Non-profit activities: Worked for SUTN (ISO national body) since 2008 as a part-time employee. Served as an ISO voting representative, managed sub-commissions, workgroups, and translated ISO standards into Slovak language.