Gabor Egei

Senior security / governance consultant with more than 28 years of experience in Information Security, AI Governance, Risk Management, Internal Audit, Compliance and Data Protection across financial services, aviation, manufacturing, public sector and critical infrastructure sectors. Specialized in the design and implementation of Information Security Management Systems (ISMS), AI Governance frameworks, Enterprise Risk Management programs, DORA readiness initiatives, ISO 27001 implementation, GDPR compliance and cybersecurity governance, with a strong focus on risk management framework alignment and regulatory requirement execution. Extensive experience supporting executive leadership teams, regulatory compliance programs, internal and external audits, control framework design, risk assessments and security transformation initiatives across multinational organizations, including stakeholder management and communication with business stakeholder groups.

Owner, Senior/Executive Advisor at GIS-Consulting (2015-05 – Present)

Senior/Executive Advisor at GIS-Consulting - Financial industry (2022-09 – 2026-04)

New Entity – Information Security Framework Design – ISO2700x and DORA; IT Risk – Compliance and Risk Management – ISO2700x and DORA; Data Protection - Data Classification

Senior/Executive Advisor at GIS-Consulting - Postal industry (2020-11 – 2022-06)

• Enterprise Risk Management
• GDPR activities (RoPA, DPIA, breach management, etc.)
• ITGC / ISO2700k control framework redesign

Senior/Executive Advisor at GIS-Consulting - Internal audits - Financial industry (2020-02 – 2021-03)

• ITGC management testing
• Risk Management
• IT control framework design
• External audit coordination

Senior/Executive Advisor at GIS-Consulting - Manufacturing industry (2017-06 – 2020-04)

• SOx-404 ITGC / ISO27k implementation
• External audit coordination
• GDPR - Process design with data protection requirements incorporated
• Risk Management Framework

Senior/Executive Advisor at GIS-Consulting - Financial industry (2017-08 – 2018-09)

• GDPR – Designing GDPR compliance program plan
• ISMS / ISO27k implementation / ITGCs for financials

Senior/Executive Advisor at GIS-Consulting - Aviation industry (2015-05 – 2017-05)

• ISMS / ISO27k design and implementation

Governance Risk and Compliance - Security Principal Consultant at Verizon Business – Brussels, Belgium (2011-05 – 2015-04)

• Delivered compliance consulting and IT audits, providing technical advisory to support business operation continuity and control effectiveness
• Performed risk management activities, including business impact analysis and IT risk assessments and proposed practical risk mitigation options
• Performed ISO27k gap assessments including regulatory and internal requirements
• Designed and implement ISO27k based IT policies and procedures, translating technical requirements into operational controls
• Ensured quality in the deliverables in all engagements and managed risks through structured analyst driven reporting, supporting stakeholder management and communication with business stakeholder groups

Security Principal Consultant at Verizon Business – Aviation industry (2014-09 – 2015-04)

ISMS / ISO27k redesign

Security Principal Consultant at Verizon Business – European Commission (2012-09 – 2014-03)

ISMS / ISO27k design

Security Principal Consultant at Verizon Business – European Commission (2012-07 – 2012-08)

Business Impact Analysis

Technology and Security Risk Services, Senior Manager – Brussels at Ernst & Young LLP (2008-04 – 2011-03)

• Led Pan-European audits
• Led team of ca. 15 auditors locally across multiple engagements
• Managed audit support portfolio (over 60 concurrent clients) and utilization of staff

Technology and Security Risk Services, Manager at Ernst & Young LLP (2007-04 – 2008-03)

Technology and Security Risk Services, Consultant – Reading, UK at Ernst & Young LLP (2004-12 – 2007-03)

• Deliver IT audits in support of financial statement close procedure and SOx-404

Internal Audit Department – IT Internal Auditor at Central-European International Bank Ltd. (2002-01 – 2004-08)

Internal Audit Department – Internal Auditor at Inter-Európa Bank Ltd. (1999-08 – 2002-01)

Treasury Settlement – Foreign Exchange Executive at Bank AustriaCreditanstalt Ltd. (1998-03 – 1999-07)

Loan Department – Corporate Banking, Account Manager at Európai Kereskedelmi Bank Ltd. (1997-02 – 1998-02)

BA in Economics – Budapest Business School (1998 – 2002)

Financial Advisor in Banking & Finance – International Training Center for Bankers (1995 – 1998)

General Certificate of Secondary Education in Electrical engineer – Secondary School specialized on computer technology (1989 – 1994)