Vladimir Mildenberger
Senior Security Analyst
Experience
Aug 2022 - Present
3 yearsSenior Security Analyst
Software/technology company
- Developed security processes and compliance documentation as well as conducted risk assessments for an AWS-based SaaS application to give customers, partners, and regulators full visibility into security measures and compliance.
- Created and maintained security and compliance documentation based on standards like ISO 27001, SOC 2, HIPAA, PCI DSS, specifically for an AWS-hosted SaaS application.
- Analyzed current and upcoming regulatory requirements and translated them into technical and organizational measures for the AWS-based SaaS platform.
- Performed security risk assessments and controls to ensure risks to the cloud-based SaaS application (AWS) were identified and effectively addressed.
- Collaborated with business and IT leaders to implement external security and compliance requirements in a global SaaS environment.
- Maintained and enhanced a public trust center offering transparency on security measures, certifications, and relevant compliance documentation.
- Communicated with internal and external stakeholders on security and compliance matters, especially regarding security controls, privacy policies, and the AWS-based SaaS infrastructure.
Jan 2021 - Jul 2022
1 year 7 monthsRemote
Project Lead Palo Alto Remote Access
Aviation
- Designed, tendered, and led implementation of a remote access solution based on Palo Alto Prisma Access and GlobalProtect, including a complete redesign of the existing network infrastructure under the Zero Trust principle and close stakeholder management for successful delivery.
- Developed a concept for a secure and scalable remote access solution using Palo Alto Prisma Access and GlobalProtect, applying Zero Trust for maximum security controls.
- Prepared RFP documents and evaluated vendors through a structured selection process.
- Redesigned network infrastructure to ensure integration of a Zero Trust Network Access (ZTNA) model.
- Led a multidisciplinary project team, coordinating internal and external resources.
- Conducted workshops and alignment sessions with technical, operational, and business stakeholders to define and agree on requirements and objectives.
- Ensured compliance with security standards and corporate policies by applying Zero Trust principles in implementation.
- Managed continuous risk and change management to ensure timely and successful project delivery.
Aug 2020 - Dec 2020
5 monthsProject Support OT/ICS Security
Aviation
- Designed and implemented OT/ICS security processes, policies, and best practices. Led workshops and project coordination to sustainably enhance protection of the company's OT systems.
- Analyzed the company's OT requirements, including security challenges related to Operational Technology (OT) and Industrial Control Systems (ICS).
- Evaluated existing security processes and developed and implemented a strategic approach for OT/ICS security.
- Established a comprehensive project organization, defining roles and responsibilities, and launched the project with clear milestones.
- Developed and introduced required processes, policies, and best practices, tailored to the client's specific needs.
- Applied established standards like IEC 62443, NIST, CIS Controls, and BSI IT-Grundschutz to ensure a compliant and robust security level.
- Introduced asset and risk management, including identifying critical assets, assessing risks, and deriving suitable measures.
- Carried out a pilot project to validate the developed security concepts and operationalize the processes.
- Led workshops with internal and external stakeholders to align security requirements, foster understanding of OT security, and support the implementation of measures.
Feb 2020 - Jul 2020
6 monthsProject Support SD-WAN
Aviation
- Implemented SD-WAN technology including a pilot setup to achieve a scalable, high-performance, and secure network architecture.
- Deployed SD-WAN to optimize network architecture and improve connection security for distributed sites.
- Assessed security requirements for integrating SD-WAN technology, including VPNs, firewall rules, and network security needs.
- Designed a migration plan for a seamless transition from a traditional network architecture to SD-WAN while maintaining operational and security standards.
- Developed a testing plan to validate the new SD-WAN solutions in a realistic environment to ensure performance and stability.
- Managed providers and worked with external vendors to select and implement the best SD-WAN solutions for the client.
- Set up and coordinated the pilot deployment to test and refine the SD-WAN technology's functionality and security before full rollout.
- Created comprehensive documentation detailing all planning, implementation steps, and test results.
Mar 2017 - Dec 2019
2 years 10 monthsFrankfurt, Germany
Management, Secure Information, Project Lead, Executive
Consulting
- Led a team of security consultants and managed client projects in the central region (Frankfurt am Main), including technical and disciplinary leadership, project control, and advice in cybersecurity and information security.
- Provided technical and disciplinary leadership for the security consultant team, supporting staff development and fostering a high-performing team dynamic.
- Positioned and represented the security portfolio to ensure the company is seen as a competent partner in cybersecurity.
- Oversaw and drove success of security projects in the Frankfurt region, focusing on information security and network security solutions.
- Developed the team technically, handled recruiting, and built the consulting team to meet growing cybersecurity market demands.
- Controlled and reported relevant KPIs and held P&L responsibility to ensure project profitability and efficiency.
- Advised clients on cybersecurity issues, such as implementing security solutions, risk management, and developing tailored security concepts.
- Planned and executed projects to implement security solutions and concepts in complex client environments, applying standards like ISO 27001 and BSI IT-Grundschutz.
- Coordinated and handled project communication, including at the CxO level, to ensure close collaboration and strategic alignment among stakeholders.
- Focused on network security, cybersecurity, and information security, advising on ISO 27001, BSI IT-Grundschutz, and other relevant security standards.
Dec 2011 - Feb 2017
5 years 3 monthsInternational IT Infrastructure Management
Aviation
- Managed IT infrastructure at sites across Europe, Africa, and Russia (including CIS states), focusing on IT governance, information security, and international project control.
- Provided technical leadership for rollout and project teams to successfully implement and commission IT infrastructure at international sites.
- Oversaw more than 3,000 international workstations, delivered IT services, and ensured smooth operations.
- Served as Business Information Security Officer (BISO) to enforce IT security standards and compliance requirements and establish relevant security policies.
- Led international projects in close collaboration with global teams and external vendors, handling escalations and provider management to ensure efficient service delivery and risk mitigation in complex IT environments.
- Monitored compliance with information security and IT governance policies to meet international standards like ISO 27001 and industry-specific security requirements.
Summary
- 20+ years of experience in IT infrastructure and IT security.
- Expertise in IT security and compliance in complex environments.
- Project management and leadership in large international security projects.
- Industry experience in aviation, technology, and consulting.
- Technical expertise in Cloud (AWS), Zero Trust, and cloud security.
Are you looking for a result-driven security consultant and project lead who navigates international corporate environments with ease and brings extensive industry experience?
Technical understanding, management skills, conflict resolution, and taking responsibility are my strongest competencies, which I enthusiastically apply in daily work to achieve your success.
You will benefit from my broad expertise in various areas of information technology and IT security. From analyzing requirements and designing targeted concepts to developing and delivering a technical solution.
My technical skills are rounded out by years of experience leading small and large teams. Servant leadership is natural to me and a key factor for consistently productive and goal-oriented collaboration with you.
The combination of leadership and technical foundation allows me to assess your projects from a management perspective and understand the most important technical decisions needed for your project's success.
Languages
German
NativeEnglish
Advanced Education
Oct 2007 - Jun 2009
Lorem ipsum dolor sit amet
Master of Science · Computer Science
Oct 2004 - Jun 2007
Lorem ipsum dolor sit amet
Bachelor of Science · Computer Science
Certifications & licenses
Asana Workflow Specialist Certificate
AWS Certified Cloud Practitioner
Certificate of Cloud Security Knowledge (CCSK)
Aviatrix Certified Engineer (ACE) Multicloud Network Professional
Certified Cloud Security Professional (CCSP)
Need a freelancer? Find your match in seconds.
Try FRATCH GPT More actions
Similar Freelancers
Discover other experts with similar qualifications and experience
