Experience

ZiraatBank BH

• Bosnia and Herzegovina
• Banking
• 100 - 200 Employee

• Chief Information Security Officer

  • Aug 2022 - Present

  • Participates in the development of information security policies and their revision, • Participates in the development and implementation of logical, physical and administrative controls to reduce exposure of the Bank's information security risk, • Regularly coordinates with the organizational parts of the bank regarding exposure to security risks, defining the key resources of the information system, methodology, strategy, policy and process of the information system, •… Show more • Participates in the development of information security policies and their revision, • Participates in the development and implementation of logical, physical and administrative controls to reduce exposure of the Bank's information security risk, • Regularly coordinates with the organizational parts of the bank regarding exposure to security risks, defining the key resources of the information system, methodology, strategy, policy and process of the information system, • Participates in assessing and monitoring information system security risks and proposing activities aimed at managing information and data security risks at the bank level, • Participates in cooperation with external collaborators when performing independent testing of information system security, • Participates in security risk assessment on projects involving information systems • Participates in the preparation of the control implementation plan to improve the security of the Bank's information system • Recommends methods for vulnerability detection and system remediation, oversees system vulnerability testing, • Participates in the work of the Information System Management Board, as needed and in the absence of the Manager, • Monitors the distribution of security patches, • Monitors security logs, • Performs control of adherence to prescribed policies, procedures and standards that regulate information security risk management, • Oversees other established controls to reduce information security risk exposure, • Creates and revises internal acts in the domain of information security • It provides the necessary assistance to the Bank's organizational units in the segment of information security, • Identifies and investigates incidents related to information security, • Participates in the work of the incident management team (lRT incident response team), • Develops and conducts trainings to raise the awareness of the Bank's employees about information security Show less • Participates in the development of information security policies and their revision, • Participates in the development and implementation of logical, physical and administrative controls to reduce exposure of the Bank's information security risk, • Regularly coordinates with the organizational parts of the bank regarding exposure to security risks, defining the key resources of the information system, methodology, strategy, policy and process of the information system, •… Show more • Participates in the development of information security policies and their revision, • Participates in the development and implementation of logical, physical and administrative controls to reduce exposure of the Bank's information security risk, • Regularly coordinates with the organizational parts of the bank regarding exposure to security risks, defining the key resources of the information system, methodology, strategy, policy and process of the information system, • Participates in assessing and monitoring information system security risks and proposing activities aimed at managing information and data security risks at the bank level, • Participates in cooperation with external collaborators when performing independent testing of information system security, • Participates in security risk assessment on projects involving information systems • Participates in the preparation of the control implementation plan to improve the security of the Bank's information system • Recommends methods for vulnerability detection and system remediation, oversees system vulnerability testing, • Participates in the work of the Information System Management Board, as needed and in the absence of the Manager, • Monitors the distribution of security patches, • Monitors security logs, • Performs control of adherence to prescribed policies, procedures and standards that regulate information security risk management, • Oversees other established controls to reduce information security risk exposure, • Creates and revises internal acts in the domain of information security • It provides the necessary assistance to the Bank's organizational units in the segment of information security, • Identifies and investigates incidents related to information security, • Participates in the work of the incident management team (lRT incident response team), • Develops and conducts trainings to raise the awareness of the Bank's employees about information security Show less



Intesa Sanpaolo Banka BiH

• Bosnia and Herzegovina
• Banking
• 100 - 200 Employee

• Senior IT System Engineer

  • Nov 2016 - Aug 2022

  Design, implementation and management of the central and distributed ICT infrastructure, ensuring their flexibility, reliability and competitiveness in terms of cost and service quality, and in accordance with safety requirements. Ensuring infrastructure integration with banking applications, as well as coordination and management of ICT services provided by external companies. Design, implementation and management of telecommunication network of the Bank, ensuring their… Show more Design, implementation and management of the central and distributed ICT infrastructure, ensuring their flexibility, reliability and competitiveness in terms of cost and service quality, and in accordance with safety requirements. Ensuring infrastructure integration with banking applications, as well as coordination and management of ICT services provided by external companies. Design, implementation and management of telecommunication network of the Bank, ensuring their flexibility, reliability and competitiveness in terms of cost and service quality, and in accordance with safety requirements. Creating and updating policies, procedures and other documentation related to infrastructure and telecommunications. Management of ICT projects related to the development and deployment of infrastructure and telecommunication systems. Participation in ICT projects as a member / project manager, both internal as well as projects at the level of the ISP group. Monitoring and analyzing the quality of ICT services external suppliers and internal, and to propose measures to improve the level of development of ICT systems of the Bank in relation to infrastructure and telecommunications. Monitoring of the functioning and availability of ICT networks and infrastructure, timely detection and resolution of potential problems. Providing technical support for ICT applications and management issues of a technical nature. Determining the compatibility of ICT devices and applications with the current environment, testing and guarantee their implementation. Show less Design, implementation and management of the central and distributed ICT infrastructure, ensuring their flexibility, reliability and competitiveness in terms of cost and service quality, and in accordance with safety requirements. Ensuring infrastructure integration with banking applications, as well as coordination and management of ICT services provided by external companies. Design, implementation and management of telecommunication network of the Bank, ensuring their… Show more Design, implementation and management of the central and distributed ICT infrastructure, ensuring their flexibility, reliability and competitiveness in terms of cost and service quality, and in accordance with safety requirements. Ensuring infrastructure integration with banking applications, as well as coordination and management of ICT services provided by external companies. Design, implementation and management of telecommunication network of the Bank, ensuring their flexibility, reliability and competitiveness in terms of cost and service quality, and in accordance with safety requirements. Creating and updating policies, procedures and other documentation related to infrastructure and telecommunications. Management of ICT projects related to the development and deployment of infrastructure and telecommunication systems. Participation in ICT projects as a member / project manager, both internal as well as projects at the level of the ISP group. Monitoring and analyzing the quality of ICT services external suppliers and internal, and to propose measures to improve the level of development of ICT systems of the Bank in relation to infrastructure and telecommunications. Monitoring of the functioning and availability of ICT networks and infrastructure, timely detection and resolution of potential problems. Providing technical support for ICT applications and management issues of a technical nature. Determining the compatibility of ICT devices and applications with the current environment, testing and guarantee their implementation. Show less



Vakufska banka d.d. Sarajevo

• Sarajevo, Bosnia and Herzegovina

• IT System and Network Administrator

  • Apr 2016 - Nov 2016

  - maintenance and development of IT systems and network​ - administering Active Directory/Domain Controller infrastructure (user accounts, GPO, etc.) - monitoring and administering MS Windows servers infrastructure - monitoring and administering UNIX server infrastructure - monitoring and administering VMware virtualization platform (Cisco UCS) - monitoring and administrating mail server - monitoring and administering company network (LAN, WAN) -… Show more - maintenance and development of IT systems and network​ - administering Active Directory/Domain Controller infrastructure (user accounts, GPO, etc.) - monitoring and administering MS Windows servers infrastructure - monitoring and administering UNIX server infrastructure - monitoring and administering VMware virtualization platform (Cisco UCS) - monitoring and administrating mail server - monitoring and administering company network (LAN, WAN) - monitoring and administering firewalls (Check Point, Juniper, Unix) - monitoring and administering VPN infrastructure and user remote access - responsible for backups (servers, client data, network device configurations) - planing, optimization and maintaining network topology - licensing MS Windows, commercial firewalls and other software - backup Oracle databases - maintaining Disaster Recovery site - system administering SWIFT Alliance Entry server Show less - maintenance and development of IT systems and network​ - administering Active Directory/Domain Controller infrastructure (user accounts, GPO, etc.) - monitoring and administering MS Windows servers infrastructure - monitoring and administering UNIX server infrastructure - monitoring and administering VMware virtualization platform (Cisco UCS) - monitoring and administrating mail server - monitoring and administering company network (LAN, WAN) -… Show more - maintenance and development of IT systems and network​ - administering Active Directory/Domain Controller infrastructure (user accounts, GPO, etc.) - monitoring and administering MS Windows servers infrastructure - monitoring and administering UNIX server infrastructure - monitoring and administering VMware virtualization platform (Cisco UCS) - monitoring and administrating mail server - monitoring and administering company network (LAN, WAN) - monitoring and administering firewalls (Check Point, Juniper, Unix) - monitoring and administering VPN infrastructure and user remote access - responsible for backups (servers, client data, network device configurations) - planing, optimization and maintaining network topology - licensing MS Windows, commercial firewalls and other software - backup Oracle databases - maintaining Disaster Recovery site - system administering SWIFT Alliance Entry server Show less



atom Holding

• United Arab Emirates
• Construction
• 1 - 100 Employee

• IT System Engineer

  • Nov 2013 - Apr 2016

  Maintaining and optimizing server and network infrastructure in Mecca Clock Royal Tower. Microsoft and Linux Server Management; Citrix and VMware Virtualization; Active Directory MS Windows 2012; Asterisk PBX; Acronis Advanced Backup; Aerohive Wifi network; pfSense Firewalls; Kaspersky Endpoint Security for Business; Maintaining and optimizing server and network infrastructure in Mecca Clock Royal Tower. Microsoft and Linux Server Management; Citrix and VMware Virtualization; Active Directory MS Windows 2012; Asterisk PBX; Acronis Advanced Backup; Aerohive Wifi network; pfSense Firewalls; Kaspersky Endpoint Security for Business;



Raiffeisen Bank dd BIH

• Bosnia and Herzegovina
• Banking
• 500 - 600 Employee

• Associate for IT Security

  • Apr 2011 - Oct 2011

  Organization of information security; Incident management for information security; Implementation of the guidelines and procedures related to information security; Monitoring and control of the employee regarding the implementation of measures to protect informations; PCI DSS implementation; ArcSight ESM Organization of information security; Incident management for information security; Implementation of the guidelines and procedures related to information security; Monitoring and control of the employee regarding the implementation of measures to protect informations; PCI DSS implementation; ArcSight ESM



Team Consulting d.o.o.

• Bosnia and Herzegovina
• Information Technology & Services
• 1 - 100 Employee

• IT System Engineer

  • Oct 2010 - Feb 2011

  Manage security concerns associated with local area networks, wide area networks, company websites, corporate intranet/extranets/portals, storage, remote access and email communications. Monitor all servers for possible systems problems. Plan, implement and maintain Active Directory DNS, DHCP, infrastructure. Control and manage WAN, LAN along with a knowledge of the operations and management of equipment and applications used in firewall environment, router, switches and remote access… Show more Manage security concerns associated with local area networks, wide area networks, company websites, corporate intranet/extranets/portals, storage, remote access and email communications. Monitor all servers for possible systems problems. Plan, implement and maintain Active Directory DNS, DHCP, infrastructure. Control and manage WAN, LAN along with a knowledge of the operations and management of equipment and applications used in firewall environment, router, switches and remote access. Support and maintain major system applications such Windows XP/7, 2003/2008 server, corporate Antivirus, file servers, SQL server, Backup server, Mail server and other applications. Troubleshoot all TCP/IP and Network Connectivity Issues. Show less Manage security concerns associated with local area networks, wide area networks, company websites, corporate intranet/extranets/portals, storage, remote access and email communications. Monitor all servers for possible systems problems. Plan, implement and maintain Active Directory DNS, DHCP, infrastructure. Control and manage WAN, LAN along with a knowledge of the operations and management of equipment and applications used in firewall environment, router, switches and remote access… Show more Manage security concerns associated with local area networks, wide area networks, company websites, corporate intranet/extranets/portals, storage, remote access and email communications. Monitor all servers for possible systems problems. Plan, implement and maintain Active Directory DNS, DHCP, infrastructure. Control and manage WAN, LAN along with a knowledge of the operations and management of equipment and applications used in firewall environment, router, switches and remote access. Support and maintain major system applications such Windows XP/7, 2003/2008 server, corporate Antivirus, file servers, SQL server, Backup server, Mail server and other applications. Troubleshoot all TCP/IP and Network Connectivity Issues. Show less



ELOB CATV d.o.o.

• Legal Services

• Technical Director

  • Aug 2009 - Sep 2010

  Responsible for all aspects of the technical activities of Cable TV company. Provision of Telecommunications Services; transport and distribution of analogue and digital TV signals, cable Internet, VoIP telephony. Responsible for all aspects of the technical activities of Cable TV company. Provision of Telecommunications Services; transport and distribution of analogue and digital TV signals, cable Internet, VoIP telephony.



Energoinvest

• Bosnia and Herzegovina
• Industrial Machinery Manufacturing
• 100 - 200 Employee

• CISO (Chief Information Security Officer)

  • Jul 2008 - Aug 2009

  Responsible for establishing and maintaining the security of enterprise IT systems.

• Head of Department for Development and Administration of IT system

  • Oct 2004 - Jul 2008

  Organizes and manage IT Department and controls its activities; Plans development of IT system; Organizes immediately work of administrators in company IT systems; Starts necessary procedures on providing security of IT system; Plans and implements process of IT education; Starts initiative for maintenance of hardware; Starts initiative for purchasing hardware and software products

• Main engineer for the development and administration of IT system

  • Jan 2000 - Oct 2004

  Performs jobs of designing IT systems, installing and commissioning of IT systems; Defines and implements user policy of IT system; Establishes and maintains sole anti-virus protection at company's level; Update and monitor Web, FTP and mail servers; Provides functionality of network services necessary for work of the company; Works on jobs of development and application of modern technologies; Analyse's needs of users, makes solutions

• IT System Engineer

  • Mar 1998 - Jan 2000

  Installs and maintains network operative systems (client/server); Creates and administers user's profiles, implements user's policy; Creates and follows security logs; Creates back-ups at company's level; Maintains and administers IT system; Design and maintain company's web location



Benevolence Educational Center Sarajevo

• Salke Lagumdzije 12, 71000 Sarajevo (Bosnia and Herzegovina)

• Manager

  • Oct 1996 - Mar 1998

  Manage Educational Centre; Teacher for MS Word, MS Excel, MS Access, AutoCAD, CorelDRAW, Internet... Manage Educational Centre; Teacher for MS Word, MS Excel, MS Access, AutoCAD, CorelDRAW, Internet...



International Islamic Relief Organisation IGASA

• IT Engineer

  • Mar 1993 - Oct 1996

  Installing, supporting and maintaining hardware and software infrastructure; Database developer; DTP designer Installing, supporting and maintaining hardware and software infrastructure; Database developer; DTP designer