Interim Information Security Officer

Brand New Day

Banking & Financial Services

1000-5000 team member

Primarily: self-assessment / gap analysis based on the EBA guidelines ICT and risk management and DORA focused on design and existence. The aim is to identify the areas in which the existing policies, procedures and further elaborations contain gaps with regard to these two EBA guidelines and the DORA Regulation. Creating a mapping between the current environment and DORA Regulation GAP’s. Changing all current procedures and policies in perspective to the DORA Regulation.
Secondary: on an ad hoc basis, only in case of high priority cases, giving advice and/or reviewing specific cases from the ISO role. Awareness and Phishing training.
Delivery Management summary and general GAP security report
Proposal delivery Dora & EBA guidelines.
Key Components:
§ Configuration Management
§ DORA, EBA, DNB, PRA, ESMA regulation and Operational Resilience regulatory § IT- Asset Management
§ IT- Service Delivery
§ Change Management
§ Risk Management / Security and Compliance § Incident Management
§ Entra ID (Intune) and Microsoft Security tools

Senior Information Technology Program Manager DarkMatter LLC

DarkMatter LLC

Internet & IT

1000-5000 team member

• Digital Transformation – AI – Ml – RPA
• Transition – Migration – Data Cleansing
• Cyber Education Darkmatter - DigitalE1 UAE / Program Manager Cyber Range

Serving Clients:
• Expo2020 Dubai
• Min. of Foreign Affairs HQ, Abu Dhabi
• Min. of Finance, Abu Dhabi
• Department of Economic Development, Abu Dhabi
• Emirates Nuclear Energy Corporation
• Training RFID (Digital Forensics and Incident Response Distribution) Ayjal Education management UAE

Digital Transformation
• Formulating managed services delivery transformation strategy in support with global Managed services practice in line with the Automation / digitization / Cloud evolution framework.
• Supporting Solutioning team to define the Transformation strategy for Managed Services opportunities in the market.
• Implement the transformation execution utilizing Managed services delivery model & automation framework covering all People, processes & tools.
• Drive transformation execution in different projects by leveraging process automation to achieve work load reduction, quality uplift and end user experience improvements.
• IT operational services and cost optimization, building a data insight team to drive digital transformation, ERP consolidation and reducing regional federation.
• Driving IT modernization transformation & simplification programmes-reduced opex asa percentage of revenue from 3.6% to 2.3%, on target to achieve 2.1% in 2021.
• Driving the digital strategy, implementation of Sales force, implementation IoT sensitization equipment/products and development of Virtual Reality product training aid – reducing global training cost - $3m.

Interim Chief Information Security Officer

Regional Education center

Government and Public Services

5000-10.000 team member

Implementation is technical and functional
Assignment:
§ Develop a new design for the upcoming security maturity uplift plan and strategy. § Security assessment
§ Developed a high- and low-level design
§ Created a project plan, including budget, man hours and recourses
§ Advice updating all security policies, procedures & responsibility matrix
§ IAM/PAM SSO/MFA/WMA/2FA Authentication
§ Lifecycle management
§ Patch management
§ Developed Crisis Management (BCM) plan
§ DORA, BIO, SOX, NEN + NEN-EN, NIS2, AVG & EBA, ISF SoGP. SWIFT CSCF.
When these tasks are delivered, it will be caried out by a third-party supplier.

OCBC bank & BDO bank Singapore/Philippines

Banking & Financial Services

>10.000 team member

IAM / PAM - Zero trust environment
Implementation is technical and functional
Implementation of NetIQ during my last program/project in Singapore, Taipei and Manila was to connect a large bank together via a zero-trust environment. For this we used NetIQ Identity Manager to manage the complete identity lifecycle to deliver efficient, consistent, and secure access to all of your corporate assets. For my 2nd project, I was implementing OKTA for the Government in the Philippines and Singapore. ISO 27001 & IEC62443 UNECE R.155, UNECE R.156 to arrange cybersecurity of operational technology (OT).
Implementation of NetIQ (1st project)
§ Provisioning workflows
§ Central point of control
§ Automate identity lifecycle
§ NetIQ Identity Governance & Compliance § More Efficient IT Operations
§ Improved Security
§ Scalability and Flexibility

Interim CIO/DPO (Part time)

Federal Government (EU) Brussels Belgium

Government and Public Services

>10.000 team member

The chief information officer (CIO) oversees the people, processes, and technologies within a company's IT organization to ensure they deliver results that support the company's goals.
As digital becomes a core competency, the CIO plays a key leadership role in the critical strategic, technical and management initiatives — from information security and algorithms to customer experience and data leveraging — that mitigate threats and drive business growth.
With the role of DPO, I was mainly responsible for ensuring that data did not end up in the hands of hackers and/or unauthorized employees. All this applied to Cloud computing, etc., Switching, VoIP, SVPN, firewall, Active Directory, Azure, IAM, PAM, SIEM, UEBA, AV, IDS/IPS, Saas, Iaas, Paas, BIO, ISFM, SAML, OIDC, management of user environments, Cloud solutions, crisis management including desktop/laptops, profile management, access control and MDM solutions.
For the role of auditor Henk Jan is a trained IT-auditor with in depth experience in IT-auditing including ITIL, annual statements of accounts (General IT Controls) SAS70/ISAE3402, Sox/PCAOB, Internal audit support, (project) Quality Assurance, Cyber Security, Information Security and Accreditation. Furthermore, Henk Jan has a high degree of experience and expertise with implementations and auditing of information security management systems.
Henk Jan has worked in the IT Assurance service line of Deloitte Risk Services where he was responsible for the overall coordination of all Deloitte IT Audits in the Southern part of Belgium.
Furthermore, Henk Jan was part of the Client & Industries team where he fulfills the role of Client Services Partner for one of Deloitte's key advisory accounts.
Between 2012 and 2016 Jan was responsible for setting up a team of IT Auditors in the Southern part of Belgium (based in Brussels). In 2016 the team consisted of 20 IT Auditors and approx. 20 Cyber Security Professionals.

Project manager/Architect IAM solution

Municipality of The Hague, Netherlands

Government and Public Services

5000-10.000 team member

The Hague, South Holland, Netherlands · Hybrid
Implementation is technical and functional
High- & Low-level technical design made for an IV organization based on BiSL-framework
Assignment description:

§ Responsible for the provision of information and advises independently on the design of the IV management organization
§ Integration SAP S/4 HANA & SAP MDG
§ Developed a multi-year innovation agenda and take the organization to the IV organization of

OCBC bank & BDO bank Singapore/Philippines Project manager/Architect IAM solution
Municipality of The Hague
Project manager/Architect IAM solution
the future

§ Implementation of IAM / PAM, A&A IDP’s, DNB, AVG workforce and tools.
§ Responsible for the strategy in the field of information provision (including information security,
architecture and privacy)
§ Provide advice on the optimal assurance and design of the CIO tasks and responsibilities in the
organization.
§ Drawing up the I-vision, framework, strategic responsibility for information provision, design IV
organization and the overarching architecture. High & Low level technical design made for an IV organization based on BiSL-framework Assignment description: - Responsible for the provision of information and advises independently on the design of the IV management organization - You develop a multi-year innovation agenda and take the organization to the IV organization of the future - Responsible for the and strategy in the field of information provision (including information security, architecture and privacy) - Provide advice on the optimal assurance and design of the CIO tasks and responsibilities in the organization. - Drawing up the I-vision, framework, strategic responsibility for information provision, design IV organization and the overarching architecture.
Skills: IAM/PAM (OKTA & NetIQ) SAP S/4 HANA & SAP MDG ·Cloud Security · Information Security Awareness · Information Security Management · Virtualization

Interim Architect Cloud solution

Municipality of Amersfoort, Netherlands

Government and Public Services

5000-10.000 team member

Implementation is technical and functional
Technical design made for an IV organization
Description of the assignment:

- Responsible for the provision of information and advises independently on the structure of the IV management organization
- You develop a multi-year innovation agenda and take the organization to the IV organization of the future
- Responsible for the strategy in the field of information provision (e.g., information security, architecture and privacy)
- Advising on the optimal safeguarding and design of the CIO tasks and responsibilities in the organization.
- Drafting the I-vision, framework, strategic responsibility for information provision, design IV organization and the overarching architecture.
The design is based on the BISL framework.

Security Program Manager

Energie Data Services Nederland (EDSN) B.V.

Energy, Water & Environment

500-1000 team member

Implementation Security program to scale up the security level to a higher level. This was carried out by first performing a security assessment, after which I looked at what needed to be improved within the company infrastructure with regard to security and compliance. The points that had all the attention was:
§ Upgrade IEC ISO 27001 2022 § Upgrade Policies

§ Upgrade procedures
§ 24/7 Monitoring of the entire infrastructure on side and in the Cloud
§ Upgrade IAM/PAM workflows, processes and protocols.
§ IAM/PAM (OKTA & NetIQ)
§ Privacy and Security compliance according to VGA, NIST 2
§ Expansion Crisis Management (BCM)
§ CIS hardening framework
§ Level 1 profile “benchmark”
§ Level 2 profile “defense in depth”

Senior manager/Architect OKTA SME

Leaseplan, CarNext

Banking & Financial Services

1000-5000 team member

§ Implementation of security technologies, such as network equipment, firewall, Active Directory, IAM, PAM, SIEM, UEBA, AV, IDS/IPS, Saas, Iaas, Paas, BIO, ISFM, SAML, OIDC, user environment management, crisis management deployment, including desktop/laptops, profile management, access control and MDM solutions.

I was able to carry out the separation from Lease to CarNext. I split off the IT infrastructure from LeasePlan, so that there would be a completely new IT environment. I also took care of migration of AD connected applications, all third parties and all user data to the new CarNext IT environment. Below is the next step on the side of CarNext.
Tasks: Design and implement Okta (Workforce Identity and Access Management/ Consumer Identity and Access Management) SSO/MFA/WMA/2FA. Lifecycle management and patch management.
Setting up a foundation for Identity and Access Management within CarNext. Implementation
of Crisis Management (BCM). At the time, the company was in the middle of an IT fork and a lot of legacy had to be cleaned up before the foundation could be laid.
My 2nd role within CarNext was Cyber Security Manager who built a new ICT/Cyber security team. My tasks where:

Project Director / Consulting Program Manager

Comverse Technology Inc.

Telecommunications

>10.000 team member

• Budget control, Implementing Agile/Scrum climate.
• Delivered 30+ Projects and Programs inside concurred spending plan, time and quality for telecom administrators in North America, South America, northern Europe and Middle East district.
• Planned and administered "idea to dispatch" for big business programming frameworks, framework combination anticipates for telecom administrators in voice, information and charging spaces.
• Prepared administration recommendations, RFP reactions and worked intimately with deals gatherings to make sure about new business
• Introduced Visual Voice Mail administrations for Verizon remote from one side of the country to the other
• Managed dispatch of first Ring Back tone venture for T-Mobile

Chief Information Officer & Chief Digital Officer (Freelance)

Abu Dhabi Airports

Transport & Logistics

5000-10.000 team member

CIO and CDO and full-time individual from the Executive Committee driving the advanced first plan, legitimately empowering Abu Dhabi Airports Company computerized change venture while supporting the productive and beneficial running of our International and Regional Airports and related organizations across UAE.
This position was based on Freelance and was a side job.

Senior Technical Program Manager

Gfi Informatique

Internet & IT

>10.000 team member

• Integration AI Environment to Abu Dhabi Government Systems
• Implementation Chatbot
• Develop Portal Application
• Train and/or coordinate technical teams and support staff in IT operations, including machine learning and data mining.
• Manage budget of 109 million AED

Senior Managing Advisor / Managing Consultant ITSEC

Camelot ITLab

Internet & IT

1000-5000 team member

Acted as Senior Managing Advisor to the firm, ensuring full compliance with the GDPR. Responsible for MDG (Master Data Governance), and MDM (Message Data Model) for various customers within this position.
Accomplishments:
• Created a GDPR framework and governance, including data conservation/deletion, data quality, data cleansing, and the current environment to obtain GDPR compliance.
• Created an MDG framework and governance
This position was based on Freelance and was a side job.

Global Chief Information Officer

IMI Precision Engineering

Internet & IT

5000-10.000 team member

CIO and individual from the chief group, liable for the worldwide arrangement of IT Strategy, frameworks, information, administrations and arrangement of projects/computerized activities that help and add to the accomplishment of the business system and needs:

• Completed key audit adjusted IT vital to business destinations center around globalizing product IT operational administrations and cost streamlining, building an information understanding group to drive information change, ERP combination and lessening territorial organization.

• Completed year 2 of the 5-year Oracle ERP solidification program empowering 5 Americas based locales to synergize, drive down expense, improve OTD by 4% and installed new EDI based client.

• Negotiated key seaward organization with Wipro for Oracle Application uphold - 15% decrease in help cost making 5x24 worldwide assistance activity.

• Developed a Business Intelligence and Analytics group - viably affecting Regional CEO's to put resources into an information system enveloping, BI, Analytics, MDM, Data Quality activities and continuous portability applications. Scene prescient examination continuous detailing establishment executed.

• Driving IT modernization change and rearrangements programs - diminished opex as a level of income from 3.6% to 2.2%, on track to accomplish 1.9% in 2019.

• Driving the computerized procedure, execution of Salesforce, usage IoT sharpening hardware/items and improvement of Virtual Reality item preparing help – diminishing worldwide preparing cost.

• Completed post procurement IT joining exercises for USA business.

Senior Information Technology Manager

Passport Business Engineering BV, Netherlands

Internet & IT

250-500 team member

Accomplishments:
Feasibility Study: related to security/regulations of the following cloud solutions:
IBM Cloud Services:
- Bluemix PaaS and IaaS
- Private Cloud
- VMware on Soft layer - "Lift & shift applications to the Cloud"
- Cloud Managed Services for Oracle, SAP and AIX applications
- Cloud Migration Services - "Journey from on premise to the cloud"
- DevTest environment in the Cloud
- Cloud Object Storage (Clever safe)

SAP Cloud Solutions:
SAP Cloud for Sales (CRM)
SAP Business ByDesign:
SAP Cloud for Travel & Expense
SAP Social Media Analytics
SAP Social Customer Engagement

In addition the vulnerability and security from IoT devices.

IT Program Manager

BNP Paribas Personal Investors

Banking & Financial Services

5000-10.000 team member

Archived GDPR Implementation/preparation for BNP Paribas, ConsorsBank Nürnberg. Total budget 16 Million Euros.
As a regulatory expert, providing legal analyses related to different EU regulatory banking law and compliance issues, and as PMO.

Key projects included:
- Implementation of the EBA guidelines on the Definition of Default;
- GDPR implementation, focusing primarily on the Controller Processor relations, Rights and Governance;
- Writing and implementing a Recovery plan;
- Setting up (Agile) Project management structures and providing PMO support.
- Supply Chain process and Management
Hadoop, Java, Clarity, XML, Jira and Confluence, Circle and SharePoint

CIPM, CISSP - Security Tech Enthusiast Die Lücke zwischen Ideen, Ausführung und Innovation schließen

Profile attachments

Experience

Languages

Project history

Interim Information Security Officer

Senior Information Technology Program Manager DarkMatter LLC

Interim Chief Information Security Officer

OCBC bank & BDO bank Singapore/Philippines

Interim CIO/DPO (Part time)

Project manager/Architect IAM solution

Interim Architect Cloud solution

Security Program Manager

Senior manager/Architect OKTA SME

Project Director / Consulting Program Manager

Chief Information Officer & Chief Digital Officer (Freelance)

Senior Technical Program Manager

Senior Managing Advisor / Managing Consultant ITSEC

Global Chief Information Officer

Senior Information Technology Manager

IT Program Manager

Contact form