
Information Technology and Services Consultant at ABN AMRO (przeslawski@gmail.com)
Warsaw Area, Poland

Information Technology and Services Consultant at ABN AMRO (przeslawski@gmail.com)
Warsaw Area, Poland
PROFILE:
• IT Security Professional with 5 years of experience in IT in both technical and managerial areas with track record for driving information security activities in Fortune 500 companies
• Currently responsible for the delivery of IT Risk Assessments of critical Information Systems and IS projects which involves cooperating with penetration testers, security officers, IS departments and audit departments
• Proven relationship management skills in a diverse business environment with ability to communicate and work effectively with leaders in driving Information Security agenda
LANGUAGES:
• Polish (native)
• English (professional) TOEIC:985/990 (2008)
• German (intermediate)
CERTIFICATIONS:
• CISA - Certified Information Systems Auditor issued by ISACA
• CISSP - Certified Information Systems Security Professional issued by ISC(2)
• CEH - Certified Ethical Hacker issued by EC Council
• ISO 27001 Lead Auditor
• IT Infrastructure Library (ITIL) Foundation issued by EXIN
CLEARANCES:
• Security Clearance issued by Internal Security Agency in Poland allowing access to information classified as ’confidential’
TRAININGS:
• ITIL Service Manager - Service Support
• ITIL Service Manager - Service Delivery
• IRCA approved Information Security Management System Auditor / Lead Auditor Training Course for ISO 27001
• Audit & Internal Review (ACCA Paper 2.6)
• Cost Management Accounting (ACCA Paper 1.2)
• Bookkeeping & Accounting (ACCA Paper 1.1)
• Team Working by PriceWaterhouseCoopers
• Risk management in IT projects by Ernst & Young
• Negotiations with internal clients
• Communication with internal clients
• CEH - Certified Ethical Hacker (Chicago, USA)
• Auditing and Securing Oracle Databases (Atlanta, USA)
ASSOCIATIONS:
• ISACA Information Systems Audit and Control Association
FUNCTIONAL:
• Project Risk Management
• IT Security Audit
• IT Risk Assessment
• Sarbanes-Oxley Act Compliance
INDUSTRIAL:
• Financial Services
• Information Technology
(Public Company; ABN; Banking industry)
October 2007 — Present (2 years 3 months)
• Participating in ABN AMRO/ RBS separation and integration activities related to information security
• Acting as a virtual project team member within internal IT projects to ensure that the security controls of new applications being developed/acquired and deployed within the Bank are adequate to meet the business needs and in compliance with Bank policy and other regulatory requirements
• Delivering security advice and guidance to projects using the Risk Assessment Process or other security consultancy method as directed by the Risk Assessment team management
• Working with IT project teams to raise awareness of security risks arising from the project designs, and recommending mitigating actions (at both a technical and procedural level)
• Liaising with the Business/IT to ensure that all projects complete required security documentation
• Formally documenting residual risks and areas of policy non-compliance for project for risk mitigation/acceptance
(Self-Employed; Information Technology and Services industry)
July 2007 — September 2007 (3 months)
• Providing consultancy in the area of IT security
(Partnership; Accounting industry)
September 2005 — July 2007 (1 year 11 months)
Provided IT consultancy in numerous projects of Technology division of Ernst & Young Business Advisory. The most important projects in which I took part include:
• Enterprise architecture assessment (Largest bank in Poland) – responsible for IT systems categorization process and analysis
• Change Management Project in area of Finance and Accounting (Poland’s largest FMCG company) covering adjustments of the organizational structure and processes as well as development of IT tools for transition period related to IT system implementation and reengineering of Finance and Accounting Departments – responsible for analysis of IT systems functionalities and interfaces as well as development and implementation of new solutions for the transition period
• Legal compliance engagements (World's largest FMCG company) – responsible for the whole engagements
• Business risk assessment (Central Europe’s largest insurance institution) – responsible for IT risk assessment and reporting
Participated in various projects of Technology and Security Risk Services division of Ernst & Young Audit. The most important projects in which I took part include:
• Audit of the the largest IT project in Poland (Insurance, Banking) – responsible for documentation of business process including identification and assessment of IT controls
• SOX 404 compliance advisory engagements in FMCG company (Brewing company) – responsible for IT general controls and application controls testing and reporting
• Numerous Financial Audit Support and Assurance engagements for the Telco and FMCG sectors – responsible for documentation of business processes including identification and assessment of IT controls
• Enterprise architecture assessment and analysis (Downstream oil company) – responsible for IT systems categorization process and analysis
(Research industry)
January 2005 — June 2005 (6 months)
Position involved activities ranging from management and administration of Local Area Network and servers to software development. In this period of time I had a chance to stay current with new technologies, platforms and architectures as well as to gain experience in various areas of business and IT research. The duties included:
• Management and administration of Local Area Network
• Software development in LAMP environment
• Shell scripting
• Microsoft Windows NT/2000 servers administration (DNS, DHCP, file servers)
• Linux servers administration (WWW, Mail, DNS, FTP, firewall)
• User support (installation and administration Windows 2000 workstations)
• Translation of technical articles
MSc , Computer Science - Information and Network Systems , 1999 — 2004
• Specialization: Information and Network Systems
• Thesis title: Implementation of business to customer system in hardened LAMP environment
• Subject matter: Platform specific secure development standards
Computer Science 1995 — 1999
• Four-year course of study with Computer Science profile
Traveling, trekking, basketball
Polish division of Information Systems Audit and Control Association (ISACA)
• Laureate of Polish nationwide „Grasz o Staz” ("Play for an Internship") academic competition, organized by PriceWaterhouseCoopers and Gazeta Wyborcza
• Competition involved solving 2 case studies related to Information Technology