Lui R.

• Vulnerability Management

◦ Optimization of vulnerability management processes

◦ Performance of manual security reviews

◦ Performance of automated vulnerability scans

◦ Analysis of external sources and response to reports

◦ Analysis and evaluation of IT security risks using established and self-developed scoring systems

◦ Maintenance of a vulnerability register

◦ Remediation of vulnerabilities through configuration adjustments, workaround implementations, and patch management

◦ Tracking of vulnerabilities and pentest management

◦ Creation of reports on the current threat situation

◦ Communication of vulnerabilities with relevant stakeholders

• Incident Management

• Setup of a test and production environment

• Creation of a security concept

• Test Management

◦ Planning of tests regarding goals, scope, and strategy

◦ Creation of detailed test cases based on defined requirements

◦ Test execution according to plan

◦ Test evaluation, documentation, reporting

• Development of own scripts and tools for application administration

• Configuration and administration of the application

• Conception and execution of user training and documentation

• 2nd and 3rd level user support

Software and Tools

• Remedy IT Service Management

• Python & Powershell

• Microsoft Office & Sharepoint

Project Goal: Development of the possible implementation of an Information Security Management System according to ISO/IEC 27001:2022 with a scope of approximately 15 people

Activities

• Definition of the scope and context of the ISMS

• Performance of a GAP analysis including maturity assessment of the ISMS

• Creation of a GAP analysis report

• Creation of a project plan including timeline and required resources based on the GAP analysis report

• Definition of recommended actions based on the GAP analysis report

• Documentation and presentation of the results of the GAP analysis, the project plan, and the recommended actions for top management

Software and Tools

• Microsoft Office