Jaroslav Marecek

Background

About Jaroslav Marecek

Senior information security management specialist, risk practitioner and compliance manager with experience in building, maintaining and continuously improving ISMS, primarily according to the ISO/IEC 27k family of standards. Key competencies include PCI DSS and TISAX Compliance Management and Business Continuity Management. I am used to acting as a "mediator" between business, IT and other functions in an organization (or similarly between a customer and a service provider), ensuring that all parties can make the right decisions based on an accurate risk assessment respecting regulatory requirements. Skills- Support of the business goals from the risk management perspective (GRC, ISMS, BCM)- Understanding of NIST CSF/RMF, CIS Controls, COSO, OWASP, CSA, COBIT, ITIL, NIS2, DORA, GDPR- Critical thinking and systems thinking mindset - Understanding business people - ability to explain IT risks to non-IT people - Business Impact Analysis - Understanding IT people - ability to explain them business issues - Balancing the risk-based and the compliance-based approach to threats - Finding creative solutions, tailoring security processes to the way people do things, bringing a team discussion to conclusion - Lecturing ISO/IEC 27k standards - Readiness to work in remote international teams