STRATEGY · TECHNOLOGY · SECURITYSUMMARY
Senior Cybersecurity & IT Risk Consultant with over 10 years of experience securing enterprise, government and critical infrastructure.
Specialising in enterprise security architecture, vulnerability management, incident response and regulatory security requirements.
I help organisations reduce security risks, make IT infrastructure more resilient and align security measures with business and regulatory requirements.
My experience includes network segmentation, cloud and infrastructure security, security governance, and improving incident response and vulnerability management processes in complex IT environments.
EXPERIENCE
Freelance Cybersecurity Consultant – Medical Device & System Image Security
- Conducting vulnerability assessments and security analyses of Windows system images for medical devices
- Performing Windows image hardening and security baseline validation to secure critical system configurations
- Analysing system configurations, user permissions and network services to identify potential attack surfaces
- Conducting compliance verification and security reviews in regulated MedTech environments
- Supporting improvements to medical device security through targeted security analyses and configuration checks
- Conducting system configuration reviews to strengthen system security and reduce risks
- Automating security checks and analysis processes using PowerShell
- Collaborating with international engineering and IT security teams to improve security architecture
Project Manager – Cybersecurity Mini Diploma (Volunteer)
- Initiating and leading the “Cybersecurity Mini Diploma” educational initiative in cooperation with Coursera and the Young Global Citizens Assembly
- Developing and delivering lectures, workshops and training programmes in cybersecurity
- Establishing and developing a cybersecurity learning area with over 6,000 registered participants
- Organising monthly events and mentoring participants in Blue, Red and Purple Team disciplines
- Introducing an AI-supported broadcast format to discuss current cybersecurity topics
- Developing a training and evaluation programme to advance technical skills
- Building virtual labs for practical exercises in vulnerability analysis, patch management and incident response
External Cybersecurity Consultant – DORA Project
- Contributing to the implementation of DORA-compliant security measures in a regulated banking environment
- Conducting vulnerability assessments with Tenable and CrowdStrike and coordinating remediation across infrastructure and endpoint systems
- Analysing and handling security incidents and supporting improvements to incident response processes
- Supporting network segmentation to reduce potential attack surfaces
- Documenting security-related risks and measures and supporting internal and external security audits
- Contributing to improvements in compliance and security strategy in line with regulatory requirements (DORA)
Cybersecurity Consultant
- Advising clients on cybersecurity, information security and IT risk management
- Conducting vulnerability assessments and security analyses
- Analysing and handling security incidents and supporting improvements to incident response processes
- Planning and implementing network segmentation and security measures to reduce attack surfaces
- Supporting security audits and regulatory requirements, including compliance and governance topics
- Documenting security-related risks, measures and security processes
Founder & CEO – IT & Technology Services
- Founding and building an IT and technology company serving small and medium-sized enterprises
- Planning and implementing IT infrastructure, security solutions and backup systems
- Advising clients on network security, server solutions and IT system architecture
- Managing IT and security implementation projects across different industries
- Establishing and managing international technology and supply-chain partnerships
- Acquiring and supporting clients and developing tailored IT and security solutions
IT & Cybersecurity Consultant
- Advising companies on improving their cybersecurity and IT security strategy
- Conducting vulnerability assessments and penetration tests to identify security risks
- Implementing and configuring security solutions (Palo Alto firewalls, Check Point, Cortex SOC)
- Working in a managed Security Operations Center (SOC) to analyse and handle security incidents
- Supporting hardware and infrastructure upgrades to improve system security
- Analysing security incidents and conducting initial forensic investigations with consideration for the GDPR
IT Consultant (Infrastructure & Security)
- Planning and implementing modern IT infrastructure, cloud and network solutions for enterprise environments
- Advising clients on IT security, server architecture and digitalisation solutions
- Implementing and configuring firewall and network security solutions (including Securepoint)
- Leading technical support teams and coordinating IT projects
- Procuring and integrating server and network infrastructure for client projects
- Introducing new IT security protocols, improving system security by 35% and reducing security vulnerabilities by around 85%
Low-Voltage Engineer
- Planning and delivering technical infrastructure and low-voltage projects in accordance with international standards
- Preparing technical studies, specifications and project analyses for public and private construction projects
- Supervising the on-site installation and implementation of technical systems
- Ensuring compliance with safety and quality standards during project delivery
PROJECTS
Medical Device Security & System Image Hardening
- Conducting security analyses and vulnerability assessments of Windows system images for medical devices
- Implementing Windows image hardening and security baseline validation
- Conducting system configuration reviews and compliance verification
- Automating security checks and analysis processes using PowerShell
DORA Cybersecurity Compliance – Banking Sector
- Supporting the implementation of DORA-compliant security measures
- Conducting vulnerability assessments using Tenable and CrowdStrike
- Improving incident response processes and network segmentation
- Supporting security audits and regulatory compliance
High Availability Infrastructure & Virtualization
- Building a Hyper-V high-availability cluster
- Developing a backup and disaster recovery strategy
- Centralising virtualisation infrastructure
Selected Engineering & Security Infrastructure Projects
Critical Infrastructure Security Systems
- Planning and implementing access control and video surveillance systems for high-security infrastructure
- Integrating security solutions for government facilities and critical sites
- Supporting the development of technical infrastructure and data centre components
Enterprise Hotel Security Systems
- Implementing CCTV and access control systems for international hotel chains
- Planning and installing security and surveillance systems
- Integrating security solutions into existing building systems
EDUCATION
Computer Science (ongoing)
IT Specialist / Systems Integration
Bachelor’s in Information Technology – Specialisation in Network Engineering
CERTIFICATIONS
Cybersecurity
- CompTIA Security+ — 2025
- ISC² Certified in Cybersecurity (CC) — 2023
- Palo Alto Networks Certified System Engineer — 2023
Cloud & Infrastructure
- Microsoft Certified: Azure Administrator Associate — 2022
- CompTIA Cloud+ — 2025
Networking
- Cisco Certified Network Associate (CCNA) — 2021
- Cisco Cybersecurity Analyst — in progress
Professional Programs
- ISC² Security Certification Track (SSCP, CCSP, CISSP) — in progress
- IBM Cybersecurity Analyst Professional Certificate — in progress
Training & Specialisations
- ISO 27001 Lead Auditor (Training)
- SOC Operations & Security Monitoring
- Network Operations Center (NOC) Operations
- SIEM Monitoring & Analysis (Splunk)
SKILLS
Cybersecurity
- Vulnerability management
- Incident response / Security incident analysis
- Security architecture
- Network segmentation
- Windows system hardening
- Security audits & compliance
- DORA & regulatory security requirements
Security Tools & Platforms
- Tenable
- CrowdStrike
- Splunk (SIEM)
- Palo Alto Networks
- Check Point
Infrastructure & Networks
- Network security (firewalls, IDS/IPS)
- VPN technologies
- TCP/IP, DNS, DHCP
- Windows Server Administration
- Hyper-V virtualisation
Cloud & Automation
- Microsoft Azure
- PowerShell automation
- Security Baseline Validation
- System configuration analysis
Governance & Compliance
- ISO 27001 security principles
- IT risk management
- SOC / SIEM Monitoring
- NOC Operations
SOFT SKILLS
- Strategic and analytical thinking
- Communication with stakeholders (management & technical teams)
- Security risk assessment
- Project and team coordination
- Structured problem-solving and decision-making