Cybersecurity & Information Security Consultant
Serve as an embedded security advisor across strategic banking and technology initiatives, ensuring alignment with internal security policies, industry standards, and Hungarian National Bank (MNB) regulatory requirements. Work closely with cross-functional project, infrastructure, application, architecture, and security teams to identify, assess, govern, and mitigate information security risks throughout the project lifecycle, with particular focus on DORA compliance and operational resilience within financial services.

IT Security Project Manager
Lead security workstreams across strategic IT initiatives, managing scope, timelines, deliverables, dependencies, risks, and stakeholder alignment to ensure security controls and regulatory requirements are implemented effectively and on schedule.

Supported MITRA Informatikai Zrt., an MBH Group ICT supplier to MBH Bank, in implementing the NIS2 Art. 21 risk-management measures through to completion of its statutory cybersecurity audit.

Supervised the end-to-end penetration testing lifecycle across programs, including scope definition and review, procurement and purchase-order management, coordination and rotation of external testing vendors, remediation tracking, and scheduling of recurring quarterly and annual assessments. Provide governance across security-related project phases, translating MNB and DORA requirements into executable technical and delivery activities.

Operational Resilience & Security Architecture — DORA
Drive information security and digital operational resilience across core banking platforms, aligning technical controls and governance with DORA, MNB information security requirements, Hpt., GDPR, and internal security policies. Design and govern security controls within cloud-native and service-mesh environments, including mutual TLS (mTLS), zero-trust service-to-service authorization, traffic policies, and centralized observability for secure microservices communication. Establish and maintain ICT risk, third-party risk, incident classification and reporting, and resilience-testing processes required under DORA. Act as a key technical and governance point of contact for recurring MNB supervisory audits, coordinating evidence collection, control walkthroughs, remediation of findings, and closure across IT, security, business, and external stakeholders.