Belio.co | Safeguarding Your Business in the Digital Age

In a digital ecosystem where threats evolve faster than they can be mapped, Belio stands as a vanguard for startups and SMEs. As a founder and the chief strategist, I've nurtured Belio to not just answer the "how" of cybersecurity but also the "why," instilling a proactive rather than reactive culture.

Our Vision:

Tailored Cybersecurity: 
Engineering bespoke vCISO services and Security Gap Assessments to build cyber resilience that's not one-size-fits-all.

Strategic Risk Management: 
Weaving compliance and risk management into the DNA of businesses, so they thrive secure and unencumbered.

Holistic Cyber Health: 
Developing strategies that serve as the cornerstone of trust between our clients and their customers.

Join us to sculpt a future where cybersecurity is a silent promise — delivered with conviction, crafted with intelligence.

CISO  | Founder

PROXIMA ICS

As the CEO and CISO at Proxima ICS, I wear multiple hats, leading both the business and information security fronts. With over 20 years of experience in IT Governance and Risk Management, I've been pivotal in shaping Proxima's growth and service offerings, particularly in the realms of information security and IT governance.

🔑 Key Responsibilities:

Strategic Leadership: Developed and executed overarching business strategies, focusing on business development, sales, and marketing.
Holistic CISO Services: Acted as CISO, Virtual CISO, and Interim CISO for a diversified portfolio of clients in banking, finance, and e-commerce sectors.
Customized Security Roadmaps: Created tailored information security strategies, risk assessments, and compliance roadmaps.
Team and Stakeholder Management: Orchestrated team performance improvements, coaching, and managed high-level stakeholder relationships.
Compliance and Certification: Assisted clients in achieving and maintaining compliance with international standards such as GDPR, ISO 27001, and NIST.


🌟 Notable Achievements:

Business Strategy: Drove end-to-end business strategy, positioning Proxima ICS as a leader in the information security domain.
Innovation: Accelerated DevOps processes, reducing time-to-production from one year to just 12 weeks.
Performance Culture: Instilled a culture of excellence, ensuring timely and budget-friendly project completion.


📊 Selected Projects:

Large International Bank: As a Security Wizard, I provided expertise in cloud architecture and threat modeling, significantly improving DevOps compliance with Microsoft Azure best practices.
Pharmaceutical Company: As an Interim CISO, I oversaw SOX compliance and third-party risk management, improving audit outcomes by 25%.
My dual role allows me to align complex security strategies seamlessly with business objectives, reinforcing Proxima ICS's commitment to providing a secure, compliant, and efficient operational landscape for our clients.

CEO/ CISO/ virtual CISO/ Interim CISO

Novartis

As Head of IGM GIS at Novartis, I led a team of up to 20 professionals, providing governance and information security oversight for the design, development, and operation of IT services, processes, and technologies across the organization. My leadership and expertise in information security and service delivery contributed significantly to the growth and success of the company's IT services.

Key Responsibilities:

* Established and managed a team of information security professionals, driving the design and implementation of the Information Security Strategy.
* Led major Information and IT Security-related projects, ensuring alignment with risk and compliance management requirements.
* Oversaw governance in GIS, including Process Lifecycle Management, Roles and Responsibilities, and the overall roles RACI matrix and Job Profiles updating initiative.
* Acted as a member of Steering Committees, representing GIS and providing insights in the areas of Information Security, Information Governance, and IT Service Management.

Key Achievements:

* Team establishment and growth: As Deputy IT HUB Head, I contributed to the establishment of the Prague IT HUB, which grew from 3 to 150 employees within 18 months. Successfully established a team of 20 IGM professionals in Prague.
* Leadership and Team Management: Managed geographically and culturally diverse teams located in the US, Switzerland, and the Czech Republic.
* Key Strategic Projects Management: Directed several key strategic global projects in the areas of Information Security, Governance, and Compliance, ensuring that the organization's security posture remained strong and up-to-date.

Head of Information Governance and Management (IGM) - Global Infrastructure Services (GIS)

T-Systems

As the ITSM Manager and Governance Officer at T-Systems, I was responsible for the overall leadership, management, and compliance of ISO 20000 certification, involving over 700 IT professionals. I coordinated the implementation of best practices for IT processes in line with ISO 20000, ITIL, and other relevant standards while ensuring compliance with rules set by Deutsche Telekom and T-Systems International.

Key Responsibilities:

* Overall responsibility for ISO 20000 certification process, including process analysis, mapping, optimization, and ownership of process models.
* Management of the PDCA Cycle for processes and systems connected with ISO 20000, ensuring compliance with the standard.
* Coordination and support of process owners, integrating process management tools with other management systems used in T-Systems.
* Ensured alignment with various ISO standards, including ISO 27000 (Information Security Management) to maintain a strong security posture.

Key Projects and Achievements:
*Internal audits of ISO 9000, ISO 20000, ISO 27000, ISO 14000, and ISO 18000 - Conducted internal audits to identify nonconformities and areas of improvement, ensuring compliance and maintaining certifications.
*Act4Service - Acted as one of the main local project managers for an internal transformation project, involving organizational structure, job roles, processes, and financial structures, based on blueprints provided by international project management.
*Continual service improvement process - Oversaw improvement processes in the ISO 20000 area, including Quality Assurance, by running workshops, Process Improvement Team meetings, and monitoring and setting targets and KPIs.
* E-learning pilot project - Developed and implemented an e-learning platform for internal employee training, contributing to improved security awareness and skills development.

ITSM Manager (ISO 20000) and Governance Officer

Compagnie Financière Tradition

As the Group IT Auditor for Compagnie Financière Tradition, one of the world's largest interdealer brokers in OTC financial and commodity-related products, I played a pivotal role in establishing and maintaining a strong IT audit and risk management framework for the organization. Reporting directly to the Global Head of Audit and Compliance, my role required a high level of seniority, comprehensive experience, and the ability to work collaboratively with various stakeholders across the organization.

Key Responsibilities:
* Developing and implementing risk-based IT audit strategies and plans for the entire Tradition Group, consisting of approximately 90 financial companies and subsidiaries, which involved evaluating the effectiveness of IT controls and identifying opportunities for improvement.
* Performing integrated and IT audits, as well as special assignments in major financial centers, including Paris, London, New York, and other key offices of the Tradition Group, focusing on key areas such as information security, data privacy, and IT governance.
* Collaborating with non-IT audit teams, providing insights and expertise in IT-related risks and controls, and contributing to the overall improvement of the organization's risk management and compliance posture.
* Identifying emerging technology risks and ensuring that the IT audit strategy remained responsive to the evolving risk landscape.
* Communicating audit findings and recommendations to senior management and relevant stakeholders, ensuring that remediation actions were properly tracked and effectively implemented.

My experience in managing IT audit processes and working within a highly regulated industry provides me with a strong foundation in risk management, compliance, and information security. This role has also enabled me to develop strong communication and leadership abilities along with a deep understanding of the complex interplay between technology, business, and regulatory requirements.

Group IT Auditor

Deloitte

Managed numerous audit engagements, performing a number high-level and detailed reviews of all aspects of IT risk and controls including Information Security, IT Operations, Project Management, IT Strategy and Contingency arrangements for key clients.  

Managed and coordinated number of international teams performing audit work for clients located in several countries.  Engagements involved understanding critical processes, identification of risks and testing controls, development of recommendations for clients in UK, USA, Switzerland, France, Sweden, Hong Kong and Japan.  

Participated in three months long internal audit co-sourcing project for a major global oil company, providing assurance around the processes in place over large (Billion USD) SAP deployment project - to provide comfort over the quality, reliability and repeatability of future SAP implementations. 

Managed an EU Legislation compliance engagement in airline tickets booking industry.

Detailed information will be provided upon request.

Manager - Enterprise Risk Services

KPMG

In RAS - IRM focused on projects on security reviews and risk and process analyses of the IT environment of KPMG’s audit clients and provided advisory in all areas of IT security.  Apart from other services, primarily dealt with the following:

Business Continuity Management/ Disaster Recovery Planning – risk and vulnerabilities analysis, BIA analysis, recovery strategies, BCP/DRP plan development and testing, documentation of BCP/DRP plan administration procedures and processes.

IT consulting, including risk analysis, BPA - Business Process Analysis, security reviews, creation of policies and procedures and project management.

Financial Audit Support – this consists mostly of documenting IT controls as part of financial audit engagements.

SOX advisory projects, including the identification, documentation and testing of key business process and general IT controls for several companies in UK and Czech Republic.

Detailed information will be provided upon request.

Assistant Manager in Risk Advisory Services (RAS) - Information Risk Management (IRM) department

Ernst & Young

Specialization in IS/ IT Security Architecture, Information Security and Risk Management and ERP Security/Process Integrity; participation in various Audit and Internal Audit projects; involvement in Business Risk Services projects (specialized audits, Due Diligence).

Detailed information will be provided upon request.

Consultant in Technology and Security Risk Services (TSRS)

🔒 Follow for Daily Insights on Cybersecurity

Hi, I am Petr.

I help businesses elevate their security posture and achieve compliance.

My goal is straightforward: to deliver Best Value Cybersecurity Strategies. Specifically, I focus on providing resource-efficient and effective security solutions that offer the best return on investment.

Having collaborated with industry leaders like Deloitte and KPMG, I've shaped robust security strategies across sectors such as banking, finance, and pharmaceuticals.

I want to bring this expertise to you.

Being an IT Auditor for many years, I can help you understand how to prepare for and pass audits for ITGC, ISO 27001, SOC 2, GDPR, and others.

I assist with compliance requirements and needs. Compliance is viewed as either an advantage or burden by many businesses. Failing to leverage compliance misses out on a great opportunity to create a lasting culture of security that will grow with your business.

As the founder of Belio, I offer tailored solutions like vCISO services and Security Gap Assessments, designed to establish trust and enhance security. My approach goes beyond threat mitigation; it aligns security strategies with your core business objectives, ensuring long-term resilience.

I bring a holistic perspective to the role of a CISO, encompassing governance, compliance, risk management, and incident response.

Feel free to reach out! 

📞 +31 6 1901 2448
✉ Or share your visions and challenges with me via peter@belio.co

I'm always open to discussing cybersecurity and compliance goals, challenges, strategies, and innovations.

Petr C.

EuroCTP

Chief Information Security Officer

Bare Consulting

Cybersecurity strategic advisor for small organizations. Delivering high-impact, tailor-made cybersecurity consultancy projects and innovative solutions for the SMB market. Currently in Fintech.

Current Projects:
Fractional CISO, EuroCTP

Past Projects:
Threat Modeling Workshops, CarOnSale

Founder & CTO

Belio.co | Securing Peace of Mind

Co-Founder

CerQlar

Interim CISO (on assignment from Xebia Security)
Successfully solving the startup’s security challenges and achieving SOC 2 compliance.


Outstanding achievements:
Established organization’s first security program.
Readied organization for SOC 2 audit in five months and obtained an (immaculate) SOC 2 Type 2 in eight months.

Keywords: SOC2, governance, startup, security program, ISMS
Tools: Drata, Notion, Monday (PM)

ABN AMRO Bank N.V.

DevOps and cloud migrations will be the dominant themes in most organizations for years to come.

Member of the CISO organization
Security wizard for DevOps teams
Threat Modeling workshops
Cloud architecture reviews

Projects:
Metromap: Re-imagining DevOps journey
Member of Threat modeling task force
Cybersecurity awareness 

Recent certifications:
Microsoft Azure Cybersecurity Expert
Microsoft Azure certified I&A specialist

Keywords: DevSecOps, Agile, cloud migrations, secure cloud architecture, threat modelling
Tools: IriusRisk (TM), Confluence

CISO DevOps Security Specialist

Ingram Micro

Do you know where your security gaps are? Could outsourcing all or part of your security assessments be a good fit for your organization?  If so, how can we help?

Member of the EMEA Center of Excellence - a professional services team used by our partners to deliver services for their customers.
Deliver security posture assessments in on-premise and hybrid cloud (Azure) environments.
Act as Trellix (formerly McAfee Enterprise) EMEA ambassador for internal teams and partners.
Provide research and thought leadership on a variety of topics; i.e., cloud security, threat protection/detection, TI, CASB, DLP, SOAR, SASE, xDR.

Outstanding achievements:
Microsoft certified Azure solution architect & security expert
Winner of 2021 McAfee Distributor's sales engineer of the year Award
First (worldwide) to complete the full McAfee M-HERO presales certification path (6 certs)

Keywords: security assessments, cloud security, Azure, professional services
Tools: QS CSAT, Azure

Senior Information Technology Security Consultant

Trend Micro

When the expectation is that all businesses will be breached at some point, the winning strategy is creating an environment where these breaches can be detected.

Tailor and deliver advanced workshops on our network security detection technologies to customers as part of the EMEA Professional Service team.

Achievements:
• Trend Micro certified master in key technologies
• Certified Online Training Professional (COTP)

Keywords: Network security, Deep Discovery, XDR, Virtual training

Technical Training Consultant

Palo Alto Networks

“Zero trust” should be the new normal. 

Manage the channel technical training and certification program in EMEA for networks, cloud, and endpoint security solutions, traveling extensively to our key partners to deliver impactful live training sessions, supported by virtual deliveries, depending on needs.

Outstanding achievements:
• Successfully piloted an online (virtual) certification program for EMEA channel partners, which resulted in an increased number of sessions per quarter (+60%), whilst increasing customer satisfaction (+10%)
• Certified PSE-Platform Professional and PCNSE.

Keywords: network security, system security, training and facilitating, channel enablement, cloud security (AWS, Azure, GCP), PCNSE

Technical Training Manager

McAfee

I deliver and facilitate training classes on cybersecurity and sales technique topics, writing literature and materials to be used in training programs, and designing exercises to enhance the overall experience.

Apply acquired knowledge of adult training theories to training opportunities

Keywords: training, facilitating, presenting, information security, onboarding, Solution Selling

Technical Sales Consultant

I seek to understand our partners’ needs and assess how we can provide this making it the best experience for them.

Organize and deliver a technical training program for SEUR channel partners
Assist resellers with installing and configuring McAfee technologies in their technical labs
Co-delivery of POC with partner’s presale resource on key accounts
Assist value-added distributors as a technical go-to resource for their partners

Personal successes:
Contributed to the accreditation of 100+ channel presales engineers across 9 key technologies, establishing and enhancing our relationship with key channel partners and distributors in the SEUR region.

Keywords: training and presenting, strategy, channel, pre-sales, channel technical enablement, information security, McAfee

Channel Development Specialist

I provide technical guidance to internal sales teams.

Assist EMEA Inside Sales team as a technical resource for their customers and prospects
Prepare and deliver technical presentations explaining products or services to customers and prospective customers
Confer with customers and engineers to assess equipment needs and to determine system requirements
Deliver formal and ad-hoc training sessions for new hires and as part of the team’s development.

Keywords: pre-sales,  information security, training, demo, presenting.

Technical Presales Engineer

Symantec

Project management for EMEA Order fulfilling department and team leadership in the midst of change. PMI certified, Six Sigma (Lean) Green Belt.

Information Technology Project Manager

Support Engineer, and team leader of a Tier 2 support team that provided the liaison between L1 and engineering.
Member of a security response 24x7 global team for key customers.
Deliver formal training to new hires.

Principal Technical Support Engineer / Team Lead

From coding software to supporting customers to leading cybersecurity teams, I've championed digital safety for over 20 years. My experience, certifications (CISSP, CCSP), and a deep understanding of technology and compliance standards make me the trusted advisor for startups and SMEs. Now, leading my own consulting firm, I innovate security solutions to make protection simple and affordable.  Let's make your business cyber-strong.

taplio

The Battle

Petr C.

Paolo Carner, MSc

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?