Syncron

InfoSec Analyst

Knightec

- Engaged in client assignment focusing on Third-Party Risk Management (TPRM).
- Engaged in client assignment determining client's overall security posture and compliance with relevant security standards and regulations. 
- Worked on various internal projects and developed competencies in cyber compliance, governance (NIS2, ISO 21434, TARA, ISO 81000-1-5, CRA), and penetration testing areas.

Cybersecurity Consultant

Nokia

During my time as a Thesis Worker, I undertook an extensive research and wrote thesis on the topic "An Approach for Efficient Identification and Treatment of Common Risks in CI/CD and Cloud-Based Enterprise Solution Ecosystem". I defended my thesis successfully at both Aalto University and EURECOM, resulting in the attainment of a double degree diploma with honors.

Thesis Worker in Security Risk Management

While working in Nokia, my main responsibilities included:
- draft ISO 27001 implementation framework for selected services and internal processes 
- perform risk assessments for selected functions as per ISO 27005 
- identify risks through employee interviews and a detailed review of existing documentation 
- define risk treatment plans for the identified security risks

Security Trainee

Aalto University

Working as a teaching assistant for the Information Security course at Aalto University. This course covers a wide array of cybersecurity topics (SQL injections, user authentication, buffer overflow, protocols, etc.) of which I am required to be well versed in to be able to assist other students.

Teaching Assistant for Information Security course

My main responsibilities included:
- Regulatory Cybersecurity and IT Audit for major Bosnian and Montenegrin companies
- Internal Cybersecurity and IT Audit for major Serbian companies in accordance with ISO 27001, ITIL, COBIT
- Testing of IT General Controls (ITGC) for major companies in Serbia, Montenegro, and Bosnia and
Herzegovina
- Audit of security settings of operating systems, databases, or security tools, e.g., antivirus solutions,
ﬁrewalls, IDS systems, etc.
- Assisting in the administration of penetration tests and phishing campaigns
- Conducting IT Due Diligence projects
- Business process automatization using Robotic Process Automation (RPA) Technologies

Cybersecurity and IT Risk Consultant

Cybersecurity and IT Risk Internship

I am a Cybersecurity Consultant with 4 years of professional experience, an ISO 27001 certification for Lead Auditor and ISC2 Certified in Cybersecurity (CC) certification. Currently working as a InfoSec Analyst at Syncron.

At the workplace, I enjoy working in teams and collaborating with people coming from different professional and cultural backgrounds. I strive to be proactive, genuine, and diligent in my everyday work while having a critical mindset. I am adaptable to changes and quick to propose creative and pragmatic solutions.

Taplio

Bojana Bakić's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Bojana Bakić's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Bojana Bakić's Linkedin Analytics