Markus Hamara

Background

About Markus Hamara

I’m qualified Lead Auditor for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 9001 standards, and I’m conducting official (certification) audits both as LA and team member depending on the customer needs. My extensive experience in evaluating and auditing ISMS and QMS has taught me ability to identify non-conformities and areas of enhancement through an auditor’s perspective. My expertise is focused on the objective assessment of systems against the set criteria, with a commitment to impartiality and the professional integrity of a Lead Auditor. In my current role I’m working also as a Chief Cyber Security Analyst conducting a variety of assignments related to cyber security surveys, architecture reviews, conformity assessments, Secure Software Development Lifecycle (SSDLC) activities, and supporting ethical hacking (Information systems) and phishing. When conducting architecture reviews OWASP ASVS can be guiding framework, including evaluation, for example, AWS environment(s). Conformity assessments adheres to frameworks and standards such as ISO/IEC 27001, OWASP, NIST, GDPR, NIS2. SSDLC activities underlines the importance of embedding security controls throughout the whole lifecycle. My strong expertise in software development and coding significantly enhances my ability to perform cybersecurity assessments, architecture reviews, and to integrate security measures within the Software Development Lifecycle (SSDLC). Understanding the coding practices allows me to pinpoint security vulnerabilities and propose effective solutions, thereby supporting my approach to ensuring system integrity and securing digital ecosystem. I have over ten years of experience with embedded software and several years with full stack web technologies. Keywords: C, QT, C++, Python, Pyramid, Meteor, Node, JavaScript, TypeScript, React, MongoDB, PostgreSQL, TCP/IP. In addition, to working closely with the customer in my daily activities, I am also supporting sales and preparing offers when needed. In short, my job is to improve customers’ cyber security posture, protecting them against different cyber security threats and securing their most valuable asset - information. I proudly hold CISSP, CCSP and CompTIA Security+ certifications and am looking forward to continuing my studies in this field. I’m a fast learner of the technologies and I breathe for new challenges. As a team player, everything I do, I do with a great attitude and with high quality.