Information Security Specialist

2017 - present
Conducting training sessions in the following areas:
Networking Technology: Switching, Routing, Security, including
preparation for certifications.
Windows: Server and Active Directory, including preparation for
certifications.
Network Services (DNS, DHCP, RADIUS, etc.).
Development and elaboration of training concepts. Creation of
presentations and training materials.
Assistance in creating project proposals and documentation, and in
exam preparation.
Mathematical fundamentals, basics of cryptography, fundamentals
of information security (ISO/IEC 27001, BSI).
Human aspects in information security.

Restructuring, optimizing, and hardening of the Active Directory.
Restructuring of file permissions (confidentiality protection).
Restructuring of GPOs (defining policies and rights).
Migration to Office 365 including Lync Online.
Security:
Management and coordination of IT security projects.
Development and implementation of security policies and
procedures.
Monitoring compliance with security standards and regulations.
Identification of security vulnerabilities and risks, as well as
implementation of appropriate measures.
Conducting training sessions for employees in the field of IT security.
Collaboration with internal and external stakeholders, including
audits.
Creation of reports and documentation for management.
Participation in training and professional development in the field of
IT security

Planning the migration scenario for both domain and Exchange
migration.
Project scheduling and milestone setting.
Incorporation and scheduling of all involved departments.
Security:
Developing and executing a comprehensive information security
strategy in alignment with organizational objectives.
Ensuring adherence to relevant laws, regulations, and industry
standards. Establishing and overseeing information security policies.
Identifying, assessing, and mitigating cybersecurity risks to safeguard
organizational assets. Developing risk management frameworks.
Designing and implementing robust security architectures for
networks, systems, and applications. Ensuring integration into the
organization's infrastructure.
Preparing and delivering regular reports on the organization's
information security posture to executive leadership.
Creation of documents for emergency planning/planning and
execution of the failover scenario.
Development of fraud prevention and detection planning documents
in collaboration with internal audit and compliance.