Provided security risk management, architecture and governance consulting within enterprise IT & OT environments, supporting regulatory compliance and risk mitigation strategies.

• Conducted security risk assessments across enterprise software and infrastructure systems
• Developed risk mitigation strategies aligned with corporate security policies
• Supported regulatory compliance and governance activities
• Delivered security reporting and recommendations to senior stakeholders

• Successfully mitigated every security risk assigned, preventing them from escalating to the Security Board for acceptance
• Supported adoption of emerging security practices related to AI technologies

Designed and implemented network security standards, best security practices and Zero Trust.

• Owned and governed enterprise-wide network security services, ensuring alignment with corporate security standards and Zero Trust principles across IT and OT environments.
• Reviewed and approved security architectures, firewall changes, external connectivity, and secure remote access solutions (Zscaler ZPA, IPSec VPN), reducing exposure to unauthorized access.
• Led and contributed to key security transformation initiatives, including FortiGate deployments, firewall segmentation, policy standardization, and iDMZ design.
• Drove the adoption of Zero Trust architecture by evaluating and integrating modern security solutions, improving overall security posture and access control maturity.
• Acted as a central decision authority for secure connectivity (suppliers, remote access, privileged access), balancing risk mitigation with business enablement.
• Collaborated with global stakeholders across IT and OT to enhance plant and enterprise security while supporting digitalization initiatives.

• Strengthened segmentation and access control across IT/OT environments through standardized firewall policies and Zero Trust design.
• Improved operational efficiency and security governance by streamlining Zscaler policies and remote OT connectivity.

Provided consultancy on the secure integration and automation between Zscaler and ServiceNow.

• Designed and implemented API-driven automation between Zscaler and ServiceNow using Azure API Management, enabling scalable and consistent security workflows.
• Optimized Zscaler (ZIA/ZPA) configurations by applying best practices, improving performance, policy consistency, and security effectiveness.
• Produced detailed technical documentation, architecture diagrams, and process flows to support automation and operational handover.
• Collaborated with cross-functional teams to deliver end-to-end integration and ensure successful testing and deployment.
• Provided technical guidance and stakeholder presentations, translating complex implementations into business-relevant outcomes.

• Delivered a fully integrated automation solution reducing manual intervention in Zscaler-ServiceNow processes.
• Enhanced visibility and control over security workflows through structured API integration.

Designed and implemented cloud-based network security solutions based on Zscaler, on a large scale.

• Designed and implemented Zscaler-based cloud security architecture across multiple countries, supporting the organization?s transition to a Zero Trust model.
• Led large-scale deployment of Zscaler Client Connector to 7,000+ users across 10 countries, enabling secure, cloud-based internet access.
• Migrated traffic from legacy on-premise proxy infrastructure (Blue Coat) to cloud-native security solutions, improving scalability and user experience.
• Developed PAC files, deployment strategies, and migration plans ensuring minimal disruption during rollout.
• Provided post-deployment support and continuous optimization, ensuring service stability and user adoption.
• Worked within Agile/Scrum teams to deliver iterative improvements aligned with business and security goals.

• Successfully executed a multi-country rollout impacting thousands of users with minimal disruption.
• Accelerated Zero Trust adoption and improved user experience through cloud-first security architecture.

Delivered global implementation of cloud-based proxy security architecture following a major cyber incident.

• Implemented Zscaler SaaS proxy solution across global infrastructure
• Configured URL filtering, SSL inspection and malware protection
• Produced operational documentation (SOPs, FAQs)
• Supported incident resolution and user onboarding

• Successfully deployed secure proxy solution to 35,000+ devices globally
• Contributed to enterprise security recovery following cyber incident
• Trained SOC teams on how to deal with specific incidents
• Improved global visibility into web traffic and threat activity

Provided security risk management for DB, as part of the CISO team.

• Led proactive security problem management within the CISO function, focusing on root cause analysis and long-term remediation of security issues.
• Drove the identification and mitigation of systemic vulnerabilities, reducing recurrence of incidents across the IT environment.
• Managed and tracked security issues (SIIs) in alignment with Operational Risk Management frameworks, ensuring regulatory and internal compliance.
• Coordinated cross-functional efforts with Threat Intelligence, Incident Response, Red Team, and business units to address complex security challenges.
• Delivered reporting and insights to stakeholders, improving visibility into security risks and remediation progress.

• Reduced repeat security incidents by enforcing structured root cause analysis and remediation processes.
• Strengthened collaboration between security, risk, and business teams, improving overall risk posture and governance.