michel gulpen

As Security Team Lead I am primarily responsible for the creation and the development of the KEMBIT Security Framework. To the internal organisation I am a security thought leader and review security implementations for our Applications and Services departments. Externally I am managing all aspects of the implementation of the KEMBIT Security Framework with our customers, reviewing security audits and act as a CISO or Information Security Officer specialized within the Governance, Risk Management and Compliance domains.

* Auditor, Risk and Compliance / Information Security Officer for the Change and IT( CIT) department * 1st line Risk * Implementation and safeguarding of the Information Security Foundation (ISF) Framework * Implementation of the COBIT 2019 framework * Cloud Assessments * Information Security Risk Assessments * Project lead for resolving Audit findings.

* Creation and Implementation of: * Security Strategy * Information Security Policy * Security Requirements * Supplier Policy * Internal Audit Process * Risk Management Process * Security Directives and processes * Data Classification Schema * Next to these tasks I have been involved as a Security contact for the new workplace based on the O365 platform.

Project Lead for the implementation of the KEMBIT Security Framework based on the ISO27001 Information Security Management System and acting CISO.

Project Lead for the implementation of the KEMBIT Security Framework based on the ISO27001 Information Security Management System and acting CISO.

Teacher for the secondary subject Cyber ​​Security. Created a course refresh to the latest security standards.

Project Lead for the implementation of the KEMBIT Security Framework based on the ISO27001 Information Security Management System.

Project Lead for the implementation of the KEMBIT Security Framework based on the NEN7510:2017 Information Security Management System.

Lead auditor performing an IT security audit, a privacy assessment, and implementation of a Data classification schema.

Lead auditor performing a privacy assessment.

Lead auditor performing an IT security audit and a privacy assessment.

Lead auditor performing an IT security audit and a privacy assessment.

Implementation of the KEMBIT Security Framework based on the ISO27001 Information Security Management System.

Performed an SAAS provider audit.

Implementation of the KEMBIT Security Framework based on the ISO27001 Information Security Management System.

Performed an IT security audit.

Performed an IT security audit.

Working as a Experienced Infrastructure Engineer for CGI with a primairy forcus on IT Security, Risk management and BCM.

* Provided 2nd line support for the internal CGI organization locations Eindhoven and Heerlen I was also responsible for hardware asset management for the CGI Netherlands organization. * SIDE ACTIVITIES * Compliance management process, I was the link between the security department and the IT Services provider within CGI Netherlands. * Antivirus solution; keep the antivirus and encryption end-point software in line with the CGI policy. * Service Improvement; created procedures as well as several work instructions to improve the maturity level for CGI Netherlands.

Assisted the CISO officer in making an Access Control Procedure for Active Directory which was based upon the ISO27001 standard.

Project IVOO; Project IVOO focused on integration, migration and optimization of datacenters in Amsterdam and Heerlen. The goal of the project was the migration, integration and consolidation of the datacenter in Amsterdam to the Heerlen location. In my second assignment on this project I created an overview of all relations that were in place for the to be migrated suites and determine the business impact.

Participated in various security bids to offer CGI’s Security as a Service to our customers.

At APG I had a participation in 2 projects; Security Integration; The goal for this project was to create a new CERT procedure for the APG security department. I assisted in combining different viewpoints within the security department and create a central point of focus for the newly to be CERT procedure. Project IVOO; Project IVOO focused on integration, migration and optimization of datacenters in Amsterdam and Heerlen. Goal is the migration, integration and consolidation of the datacenter in Amsterdam to location Heerlen. I analyzed and gathered information regarding SQL databases and related suites used by different business groups and ICT departments.

* Worked for DSM ICT, as a Security Services Officer in the Global Security competence center. * Our department is responsible for providing high-end security services for the DSM business globally. * Primary tasks in this role where; * Firewall management (Port forwarding, troubleshooting, etc) * User rights management (VNC access, Admin access) * Writing Impact Analysis (for all sorts of restrictions, firewall rules, elevated user accounts) * Information Gathering (investigation) to make a proper Impact analysis * Whitelisting of URL’s * Solving security related incidents * Implementing changes

Graduated with an A for my graduate assignment, the assignment enclosed the following: Managing IPS infrastructure, spread over 4 Cyber Centers within the Netherlands. Updated 22 IPS systems to an optimal software configuration, developed the requirements of an optimal security policy for specific networks and implemented those, as also creation of instruction manuals. As a side project the SMS server was newly setup, this server manages all the IPS Systems centrally. Operational management of the IPS infrastructure: reporting, analyzing threats, analyze and roll out of new signatures.

Responsible for first line (helpdesk) support for approximately 50 employees.