03/28/2024 updated
100 % available
Cybersecurity, Information Security Consultant, IT Auditor
Gonderange, Luxembourg
Worldwide
MSc. in Computer Science and Project ManagementArtificial IntelligenceData AnalysisSpreadsheetsCloud ComputingCloud Computing SecurityControl Objectives for Information and Related Technology (COBIT)Computer SecurityData MigrationData MiningDisaster RecoveryText EditingFraud Prevention and DetectionInformation Technology AuditIT ManagementOffice Suite
Artificial Intelligence, AI, CaseWare, Cloud computing, Cloud Security, Information Security, Cyber Security, Information Security policies, InfoSec, IT security, COBIT, Controls design, Data Analysis, Data Migration, Data Mining, Information processing, Disaster Recovery, Fraud Prevention, IT Governance, ICT, ICT Infrastructure, Computer Science, IT Audit, office suite, PCI DSS, presentation software, Software implementation, SAP S/4 HANA, Software Asset Management, software development, software maintenance, spread sheet, word processor, TOGAF, Vulnerability Assessments
Experience
Professional experience10+ years
Freelancer since2024
Languages
GermanBasic knowledgeEnglishFluentFrenchGoodRomanianNative speaker
Project history
* Setting up a new business line - Cyber Security services, mainly:
* IT and Outsourcing Regulatory Compliance (DORA, CSSF 20/750, 22/806, EBA, ENISA guidelines)
* IT Internal and External Audit (including ISAE 3402 / SOC1, SOC1)
* Cloud Security (CSA CCM, ISO 27017, ISO 27018)
* SWIFT Security Assessment CSP-CSCF
* IT Risk Assessment
* Artificial Intelligence (AI) Risk Management
* Expanding Data Protection (GDPR) services
Business or sector Professional Consulting Services
* IT and Outsourcing Regulatory Compliance (DORA, CSSF 20/750, 22/806, EBA, ENISA guidelines)
* IT Internal and External Audit (including ISAE 3402 / SOC1, SOC1)
* Cloud Security (CSA CCM, ISO 27017, ISO 27018)
* SWIFT Security Assessment CSP-CSCF
* IT Risk Assessment
* Artificial Intelligence (AI) Risk Management
* Expanding Data Protection (GDPR) services
Business or sector Professional Consulting Services
Lead, coordinate and monitor the service delivery teams to provide the following services:
* Assess regulatory compliance and implement requirements of CSSF circulars (20/750, 22/806) on IT
Governance and Outsourcing arrangements
* Perform IT and IS Risk Assessments and Business Impact Analysis
* Develop IT and IS Strategies
* Review and update Information Security policies, procedures and related documentation
* Review, update and test Business Continuity Plans (BCPs)
Business or sector Professional Consulting Services
* Assess regulatory compliance and implement requirements of CSSF circulars (20/750, 22/806) on IT
Governance and Outsourcing arrangements
* Perform IT and IS Risk Assessments and Business Impact Analysis
* Develop IT and IS Strategies
* Review and update Information Security policies, procedures and related documentation
* Review, update and test Business Continuity Plans (BCPs)
Business or sector Professional Consulting Services
Manage the IT Risk Management team and lead projects for the following services:
* Perform IT Risk Assessments based on client or Deloitte methodologies
* Provide advice for Cloud computing oversight processes improvement
* Assist organizations in obtaining CSSF Cloud Computing Authorization
* Develop IT and Security Policies and procedures
* Assist financial institutions in assessing and implementing action plans to fix deficiencies
identified following regulatory inspections
* Assist internally the security team to prepare for ISO 27001 re-certification audit
* Define Data Privacy requirements and test the configuration of ILM functionalities for an SAP
S/4 HANA implementation
* Participate in ISAE 3402 audits and coordinate IT Audits (external)
* Perform IT Internal Audits
Business or sector Professional Consulting Services
* Perform IT Risk Assessments based on client or Deloitte methodologies
* Provide advice for Cloud computing oversight processes improvement
* Assist organizations in obtaining CSSF Cloud Computing Authorization
* Develop IT and Security Policies and procedures
* Assist financial institutions in assessing and implementing action plans to fix deficiencies
identified following regulatory inspections
* Assist internally the security team to prepare for ISO 27001 re-certification audit
* Define Data Privacy requirements and test the configuration of ILM functionalities for an SAP
S/4 HANA implementation
* Participate in ISAE 3402 audits and coordinate IT Audits (external)
* Perform IT Internal Audits
Business or sector Professional Consulting Services