Women Cyber Force

Founding Board Member, Founding President

European Investment Bank (EIB)

• Coordinate development of the related internal policies, processes and procedures
• Represent Operational and Cyber Risk, as well as InfoSec in working groups and Steering Committees
• Establishing Bank’s risk appetite in terms of Operational and Cyber risk
• Control, evaluate and monitor operational risk and cyber security in accordance with the Risk Appetite established
• Manage and improve the implementation of measurement methodologies for Operational and Cyber Risk
• Monitor Bank’s internal and external cyber security policy compliance and controls, ensuring that both vendors and employees are working within the framework of the above-mentioned strategy
• Implement Key Cyber Risk Indicators to monitor and track control effectiveness
• Plan, organize, and supervise the activities of the unit
• Ensure an effective cooperation among team members and the rest of the Bank’s staff
• Propose streamlining of unit procedures
• Recruit and develop professional staff to ensure that staff within the Unit have the right competencies, objectives and motivaton in order to realise the overall strategy
• Develop mandatory awareness training for EIB staff
• Ensure close cooperation with front line staff
• Manage the production of the monthly Op Risk report as well as of the Op Risk section of the Risk Report
• Follow-up and report on all Operational and Cyber incidents and ensure their recording in the Bank’s loss event database
• Review controls, procedures, processes and systems, recommending improvements as necessary 
• Evaluate the new IT tools to be used by the Bank for its transactions, and help implement any controls that might mitigate the risk of its operations
• Promote a culture of risk and InfoSec awareness by developing and delivering ongoing training to staff at all levels

Senior Head, CISO

Women4Cyber Luxembourg (W4C Luxembourg)

ESM - European Stability Mechanism

Lead the risk identification, assessment and ongoing monitoring and reporting activities for high risk operational processes
Lead the continued developmeant of the op risk framework, op risk policy, measurement methodologies, and guidelines and directives, based on best practice and needs of business
Monitor, evaluate and challenge the organization success in managing its op risk
Interface directly with key business areas to ensure that appropriate actions following op risk incidents are agreed, and facilitate the optimization of business processes and controls
Develop and maintain an op risk register
Monitor and report on material risk issues to executive committees, including concise stats
Oversee benchmarking of risk and compliance activities with best market practice, and help determine appropriate standards
Lead review and maintenance of ICF for risk and compliance department 
Conduct ad hoc studies and reviews of emerging op risk topics, particularly related to info sec and cyber risk

Senior Op Risk and ISO Officer

Assist in the definition of the IT vision, strategy and operating model of the organisation
Develop, maintain and report on IT Risks and dashboards
Perform IT Security assessments on projects and review of contracts for IT Security clauses and best practices
Responsible for IT security, IT Risk, and Service Delivery
Coordinate pen and load tests tests
Implement policies and procedures 
Implement new systems and run Project Management 
Responsible for implementation and monitoring of IT internal controls 
Lead team for IT Services
Support overall program management including reporting of the organisation
Support the creation and maintenance of the overall budget overview of IT and Operations department 
Reliably maintain smooth functioning of all corporate IT systems, hardware and software
Manage support with outsource providers and ensure they deliver to agreed Service Levels
Participate in Service Review meetings and day to day contact person for all hardware/software related escalations
Proactively communicate to our user base and look to deliver an exceptional level of customer service
Create IT compliance plans and controls internally and coordinate with vendors
Review progress of suppliers against KPIs and SLAs, work with the IT Strategy officer to design and implement appropriate Service Level metrics and enhance reporting, issue tracking, incident/change management etc.
Maintain up-to-date knowledge on technological changes and advancements
Identify business processes/ areas not covered by current solutions/ infrastructure and assist in preparing programs to address the same
Maintain all records and documentation of the corporate applications IT infrastructure
Evaluate various network, software, application and/ or hardware options that could be adopted by the organization
3rd party negotiations on processes, contracts, procedures as well as controls

Senior Lead IT Officer, Information Security

Assist in the definition of the IT vision, strategy and operating model of the organisation
Develop, maintain and report on IT Risks and dashboards
Perform IT Security assessments on projects and review of contracts for IT Sec clauses and best practices
Coordinate pen and load tests tests
Implement policies and procedures 
Implement new systems and run Project Management 
Responsible for IT Security & implementation of IT internal controls 
Lead team for corporate IT Services
Support overall program management including reporting of the organisation
Support the creation and maintenance of the overall budget overview of IT and Operations department 
Reliably maintain smooth functioning of all corporate IT systems, hardware and software
Manage support with outsource providers and ensure they deliver to agreed Service Levels
Participate in Service Review meetings and day to day contact person for all hardware/software related escalations
Proactively communicate to our user base and look to deliver an exceptional level of customer service
Create IT compliance plans and controls internally and coordinate with vendors
Review progress of suppliers against KPIs and SLAs, work with the IT Strategy officer to design and implement appropriate Service Level metrics and enhance reporting, issue tracking, incident/change management etc.
Maintain up-to-date knowledge on technological changes and advancements
Identify business processes/ areas not covered by current solutions/ infrastructure and assist in preparing programs to address the same
Maintain all records and documentation of the corporate applications IT infrastructure
Evaluate various network, software, application and/ or hardware options that could be adopted by the organization
3rd party negotiations on processes, contracts, procedures as well as controls

Sobeys

Working closely with, and assisting the respective Lead Directors for Internal Audit, Corporate Compliance and Enterprise Risk Management, Report objectively on the adequacy, efficiency and effectiveness of the financial and operational processes, Executing a broad program of IT audits, CEO/CFO certification and project audits, Assessing the design and operating effectiveness of IT controls of the Company's financial and/or operational systems, identification of deficiencies on financial processes and financial reporting, Assisting the Company's financial and/or operational management in discharging its control and/or operational responsibilities, Maintaining an effective working relationship with Management, making audit recommendations and developing audit plans and programs, Assisting with the development, implementation and training of IT audit techniques using ACL, ISO/IEC 27001:2013 and ISO/IEC 27001:2013

Manager, IT Audit, Compliance & ERM

University of Toronto - School of Continuing Education

Guest Lecturer

George Weston Limited

Corporate Development, M&A and growth strategies

George Weston Limited has become one of Canada’s largest publicly traded companies by consistently providing quality and value to its customers. Through its operating subsidiaries, it is one of North America’s largest food processing and distribution groups.

Corporate Development, Merges & Acquisitions

George Weston Ltd

Conducting systems audits of various financial applications (Quantum, HFM 9, Solium, HRIS, Payroll Manager, InSync, Ceridian, etc.), facilities, security, services and data, Providing recommendations to business and IT management for managing risk exposures, Assessing IT related risks across the Company’s IT environment, Proposing opportunities to management for the continuous improvement of IT services and controls, Analyzing business unit and enterprise IT alignment with business objectives and strategy, Performing special assignments related to IT governance and risk

Auditor

Nortel Networks

Worked with process owners and testers to decide on best practices, made decisions on daily basis that may affect project implementation, costs and timeliness, assessed risks, complexity, dollar value and purpose for End User Computing Applications, Managed and coordinated the SOX process as it relates to IT-enabled controls, trained users on testing and documentation processes, verified that segregation of duties is adequate to enable effective internal controls, created new reports and analyzed data, assissted and trained staff as well as external consultants (E&Y) on system capabilities and testing procedures

SOX Prime

(Clients: ING Direct, Aviva, Allstate, RBC, S&Y, The Citadel, State Farm Mutual)
Gathered and defined business requirements in collaboration with business stakeholders and developers. Liaised extensively with external/internal clients and developers regarding project progress and functionality. Wrote specifications creating UATs, Test plans, Use Cases. Fully documented and stored test results. Extensively trained users on systems as required and created user manuals. Lead the issue resolution process with suppliers and users. Assisted consultants with SOX (Sarbanes Oxley Act) process mappings

IT Consultant / Business Analyst

CISO of the year award for 2019, Luxembourg. The Global Cyber Sentinel Award Winner 2020 for immense contribution to cybersecurity domain globally. CISO of the year Europe 2021.

Versatile and innovative professional with emphasis on cyber security risk management, policies and procedures creation, IT/IS security, IT Operations, audit, risk mitigation, business process improvement and IT governance. Proven results in building internal and external client relationships, even at government levels for best cybersecurity practices, and driving growth in competitive and ever-changing markets. Proactive in assessing and responding to market and consumer trends.  Highly effective at identifying and implementing business process improvements while safeguarding and adding to controls. Skilled at communicating effectively with clients, senior management and colleagues. Speaker at various events, such as UN, Risk.Net, RiskMinds, GISEC, etc.

Specialties: Cybersecurity, Policy development, IT Change and Incident Management development and implementation, IT Security, people management, SLA managment, Auditing financial systems, Risk management, Negotiations, Creative problem solver, Analytical thinker, Strong decision maker, Results driven, Innate ability to develop interpersonal relations, Proven leadership in all aspects of the workplace, Project Management, Risk Assessment & Mitigation, IT Governance & Stakeholder Liaison, Organizational Leadership & Change, COSO/COBiT Controls, Bloomberg, Microstrategy, Business Process Improvement, SOX, AutoAudit/Focus/SQL/Visio/ACL/MS Access, EBA, and ISO/IEC 27001:2013

Taplio

Jelena M.'s Linkedin Analytics

Jelena M.

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Jelena M.'s Linkedin Analytics

Jelena M.

Want to drive more opportunities from LinkedIn?

Jelena M.'s Linkedin Analytics