Daniel Kojnok

Assess or audit vendors and sub-contractors of Citi within EMEA of their compliance with Information Security requirements those are mandated legally or by Citi. Spectrum of review are from infrastructure till administrative controls to secure information assets.

Guide assigned entities in EMEA for preparation for all Audit Risk and Reviews, with identifíing deficiences against Information Security Standards, construction of remediation plans. Act as consultants to helping the units achieve a higher level of compliance with regards to Information Security Standards. Lead and coordinate globally driven IS programs regionally and educate assigned entities under their control with regard to IS initiatives and global programs highlight their role in those activities.

Support other Risk & Controls staff in performing ad hoc controls assessment activities to evaluate risk management activities within the region. Provide ongoing support to the Mergers, Acquisitions & Divestitures, Risk Assessment, Controls Assurance, Risk Liaison and Legal & Regulatory coordinators as required. Assist in raising awareness of these areas/functions within the region and globally.

Develop and coordinate Risk and Control Self Assessment framework for Log Reconciliation unit with 25+ employees, maintain and coordinate RCSA exercise for Information Security Administration center with 90+ employees. Played a Major role in the takeover of PKI encoding function from 111 Wall Street (assignment in New York) • Managing VeriSign (external CA) Certificate distribution • Entrust encryption mechanism • Secure FTP file transfer protocol to 3rd party vendors