26.10.2026 aktualisiert
verifiziert
Premiumkunde
100 % verfügbarSenior Cybersecurity Architect & Programme Manager | Cloud, IAM, AI Security, NIS2 & ISO 27001
Prague, Tschechische Republik
Nur Remote
PhD Informatik, MBA, MSc Informatik, PGDip Strategie & Innovation, MSc OxfordÜber mich
Senior Cybersecurity Architect and Programme Manager with 18 years of experience in cloud, IAM, AI security and regulated transformation. I combine deep technical expertise with governance, risk management and delivery leadership across international organisations.
Skills
Microsoft AzureCisco Certified Internetwork Expert Security (CCIE Security)Cisco Certified Network Associate Security (CCNA Security)Certified Information Security ManagerCloud-SicherheitInformation AssuranceInformationssicherheitsmanagementNetwork SecuritySoftware ArchitectureSecurity Content Automation ProtocolSolution ArchitectureVulnerability ManagementDirectory SecuritySoftware SecurityInfrastructure as Code (IaC)
Enterprise Security Architecture, Cybersecurity Architecture, Security-by-Design, Cloud Security Architecture, Microsoft Azure Security, AWS Security, Google Cloud Security, Hybrid Cloud Security, Multi-Cloud Security, Microsoft 365 Security, Zero Trust Architecture, Defense-in-Depth, Network Security Architecture, Network Segmentation, Secure Cloud Connectivity, Identity and Access Management, Identity Governance, Microsoft Entra ID, Active Directory Security, Single Sign-On, Multi-Factor Authentication, Role-Based Access Control, Conditional Access, Privileged Identity Management, Privileged Access Management, CyberArk, SAML, OAuth 2.0, OpenID Connect, Application Security, API Security, Web Application Firewall, Microservices Security, Secure Software Development Lifecycle, Secure Coding, DevSecOps, CI/CD Security, SAST, DAST, Software Composition Analysis, Secrets Management, Vulnerability Management, Vulnerability Assessment, Penetration Testing, Threat Modeling, Security Testing, Kubernetes Security, AKS Security, EKS Security, OpenShift Security, Docker Security, Container Security, Infrastructure as Code Security, Terraform Security, Cloud Hardening, System Hardening, Configuration Security, Data Security, Data Classification, Data Loss Prevention, Database Security, Encryption, Key Management, PKI, HSM, TLS Certificate Management, Cryptography, Post-Quantum Cryptography, SIEM, SOAR, SOC Architecture, SOC Operations, EDR, XDR, Endpoint Security, Security Monitoring, Threat Detection, Anomaly Detection, Incident Response, Security Incident Management, Security Assessments, Enterprise Security Assessments, Architecture Reviews, High-Level Design Reviews, Low-Level Design Reviews, Security Design Reviews, Cloud Security Reviews, Security Controls Assessment, Security Gap Analysis, Cyber Risk Analysis, Risk Treatment, Security Exceptions, Compensating Controls, Risk Acceptance, AI Security, Generative AI Security, LLM Security, AI Governance, AI Model Risk Management, AI Threat Modeling, Data Integrity, Model Robustness, Secure AI Architecture, Security Governance, Security Policies, Security Standards, Security Control Frameworks, Security Roadmaps, Security KPIs, Security KRIs, Security Reporting, Security Review Boards, Security Programme Governance, Compliance Management, ISO 27001, ISO 27002, NIST CSF, NIST SP 800, CIS Benchmarks, NIS2, DORA, GDPR, PSD2, PCI DSS, OWASP, EU AI Act, Common Criteria, FIPS, COBIT, ITIL, Critical Infrastructure Security, Financial Services Security, Banking Security, Telecommunications Security, Energy Sector Security, Industrial Cybersecurity, OT Security, Cloud Transformation Security, Digital Transformation Security, Enterprise Architecture, Solution Architecture, Security Programme Management, Security Project Management, Security Workstream Leadership, Vendor Security Management, Third-Party Risk Management, Supplier Security Assessment, Procurement Security
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2022
Sprachen
EnglishverhandlungssicherSlovakMutterspracheCzechMuttersprache
Projekthistorie
Responsible for Security-by-Design and Cybersecurity Architecture across complex telecommunications, cloud and application projects. Conducted security assessments and reviewed and approved HLDs, LLDs and technical solution architectures for Azure, AWS, GCP, Kubernetes, OpenShift and hybrid platforms. Defined security requirements for IAM, PAM, CyberArk, APIs, networks, encryption, key management, logging, monitoring and DevSecOps. Assessed security exceptions, risks and compensating controls. Supported security-critical projects involving 5G, Azure APIM, AKS, Application Gateway, Key Vault, Event Hubs, AWS EKS and MSK. Collaborated with enterprise architects, developers, cloud, infrastructure, DevOps and security teams. Managed security reviews, documented risk-based decisions and supported solutions through final approval and implementation.
Led cybersecurity architecture across global cloud and transformation programmes. Designed, reviewed and approved security architectures for Azure, AWS, GCP and Microsoft 365. Held responsibility for Zero Trust, Microsoft Entra ID, IAM, PIM, PAM, Conditional Access, SIEM, EDR, XDR, DLP, WAF, API Security and DevSecOps. Reviewed HLDs and LLDs and defined security patterns, minimum security requirements and strategic security roadmaps. Integrated SAST, DAST and vulnerability management into CI/CD pipelines. Conducted risk assessments, security assessments and security exception reviews, enabling risk-based architecture decisions. Collaborated with CIOs, CISOs, programme leaders, and Cloud, DevOps, SecOps and Compliance teams.
Led an integrated business division of approximately 50 employees, with responsibility for IT, cybersecurity, payments, middle office, back office, procurement, contract management, budgeting, facilities management and physical security. Directed transformation, digitalisation and automation initiatives for a state-owned export finance bank. Chaired the IT and Change Management Committee and prepared strategic decision materials for the Board and executive management. Implemented a bank-wide electronic signature solution based on a two-tier PKI, automated payment processing using OCR, machine learning and rule-based processing, and introduced RPA solutions. Enhanced CRM, core banking, document management and data warehouse platforms. Revised more than 100 internal policies, processes and control mechanisms.