Alex Hritcu

I have conducted the following types of projects and engagements: • Business Impact Analysis; • IT Risk Assessments; • Gap analysis & risk acceptance / mitigation activities; • Disaster Recovery and Business Continuity Planning; • Readiness exercises in order to obtain ISO 27001 and PCI DSS certifications; • Penetration testing

• Information Security Program implementation in OMV Petrom; • Building-up the Information Security Management System (ISMS); • Budget and benefit tracking within the projects; • Alignment of Information Security topics in all OMV Petrom business divisions; • Develop, document and maintain the Information Security Standards; • Develop, document and present Information Security education, awareness and training activities for users

Responsible for servicing local and multinational clients, including telecom and financial institutions, on the internal control aspects of their business. At Deloitte I was responsible for: • Designing test plans to cover significant risks, in accordance to Deloitte methodology and generally accepted practices (COBIT, ISO 2700x, etc.); • Performing field work, including test plans; • Communicating with the client, at both interviewee and management level; • Summarizing and reporting test results;

- Performed stock analysis for Diverta, Rent divison - Designed and implemented an efficient IT solution to centralize and forecast sales data.

Financial Management and Capital Markets

Economic Cybernetics and Forecasting