Peter Malits

IT Security & Compliance Lead

Zyte

Apr 2023 - Current (3 years 4 months)

Head up of Information Security and Compliance team responsible for overseeing and managing the organization's security and compliance strategies based on ISO27001 framework. This role ensures that the company's IT systems, networks, and data are secure while also meeting regulatory and industry compliance standards. The key responsibilities and tasks typically include designing and implementing comprehensive security frameworks and policies to protect sensitive data and systems from cyber threats. Ensuring the organization adheres to relevant regulatory standards (e.g., GDPR, HIPAA, PCI-DSS) and industry best practices for IT security and data privacy. Identifying, assessing, and mitigating security risks, working closely with other depart

Senior Manager of Information Security (Head of Department) and DPO

Vistra iiPay

Sep 2020 - Apr 2023 (2 years 8 months)

Head up of Information Security and Compliance team and fulfil Data Protection Officer role. Develop and maintain the information security policy and accompanying standards, procedures and guidance. Deliver a program of planned security and compliance reviews and ensure any gaps are addressed. Identify and assess information security risks and define appropriate mitigating controls; manage, co-ordinate and track risk reduction activities to promote security awareness by developing and implementing a security awareness training program. Investigate suspected and actual security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken. Coordinate the c

VP Team Local Supervisor - IT Information Security Lead Auditor for EMEA region

CITI

Dec 2014 - Dec 2020 (6 years 1 month)

Represent the team of 10 people in any escalations from internal and external clients. Monitor team travel costs, participate in manager calls and provide team operational information. Provide mentorship for newcomers and support talent recognition. Interview potential employee candidates and participate in the recruitment process. Perform remote are on-site IS assessments for Citi vendors in EMEA region countries. Identify non-compliance with Citi standards and produce detailed documentation of assessment results. Perform threat analyses of gaps identified during the assessment phases. Communicate supplier information security issues to stakeholders, ensuring their understanding of associated risks and actions needed to remediate those. Pa

IT Information Security Lead Auditor for EMEA region

CITI

Aug 2012 - Dec 2014 (2 years 5 months)

Perform remote are on-site IS assessments for Citi vendors in EMEA region countries. Identify non-compliance with Citi standards and produce detailed documentation of assessment results. Perform threat analyses of gaps identified during the assessment phases. Communicate supplier information security issues to stakeholders, ensuring their understanding of associated risks and actions needed to remediate those. Participate in the global program to enhance supplier IS risk assessment process.

IT Security Manager for EMEA region

CITI

Dec 2008 - Aug 2012 (3 years 9 months)

Provide professional IT Security consultation for Unix, Mainframe, Voice, Networks and Desktop platforms. Act as a single point of contact for auditors to represent the functional entities supported. Maintain professional oversight of audit issue remediation activities. Involved in technical policy reviews and process re-engineering workshops. Facilitate cost/benefit activities to support the issue identification and remediation process. Attend operational management meetings as required for the entities supported and engaged with global risk management teams on key control issues.

IT Risk and Control Manager for CEE cluster

CITI

Dec 2005 - Dec 2007 (2 years 1 month)

Look after for technology risk management activities for Hungary, Slovakia, Czech Republic, Romania, Bulgaria, Israel and Turkey countries. Coordinat preparation for internal and local regulatory audits and self assessments activities. Make regular compliance reviews within the department and report control deficiencies. Ensure that all corrective action plans are completed within approved time frame. Supervise Change Management and Business Recovery processes.

IT System Security Officer for Hungary

CITI

Dec 2003 - Dec 2005 (2 years 1 month)

Responsibility of information security management in various banking systems. Participate in new application implementation in account and configuration management related tasks. Conduct and solve problem inquiries received from Business clients.

About

Detail

Timeline

Résumé