Warren Paulus

Cybersecurity leader with 10+ years of experience in audit, governance, and risk management across public and private sectors, including high-security federal and military environments. Provides independent assurance on governance, risk management, and control effectiveness, and delivers risk-based recommendations to strengthen cybersecurity posture and support executive decision-making. Advises senior stakeholders and contributes to improving security governance maturity across complex and critical environments.

Cyber Security Auditor at Swiss Federal Audit Office (2020-10 – Present)

Lead independent cybersecurity audits of Swiss federal and military entities in high-security environments, covering critical government systems and sensitive infrastructures.

• Lead independent cybersecurity audits in high-security federal and military environments
• Draft and deliver confidential audit reports with risk-based recommendations aligned with international and national security standards to support internal governance, control improvement, and remediation planning
• Assess control effectiveness, identify critical risks, and deliver risk-based recommendations to enhance cybersecurity posture and support informed decision-making at federal and military level
• Support senior stakeholders in understanding risk exposure and prioritizing remediation initiatives

Cyber Security Officer at Swiss Institute of Bioinformatics (2017-11 – 2020-09)

Designed and implemented a comprehensive Information Security Management System (ISMS) and IT risk management framework to ensure confidentiality, integrity, and availability of sensitive data and processes.

• Designed and implemented a comprehensive Information Security Management System (ISMS) and IT risk management framework to ensure confidentiality, integrity, and availability of sensitive data and processes
• Monitored and continuously improved security controls to align with regulatory and compliance requirements
• Actively contributed to governance bodies, including the Data Protection and Security Board and BioMedIT Security and Privacy Working Group

Senior Information Security Consultant at EY (2017-01 – 2017-07)

Performed advanced security assessments including red teaming, penetration testing (web, mobile, infrastructure), and secure code reviews for enterprise clients.

• Performed advanced security assessments including red teaming, penetration testing (web, mobile, infrastructure), and secure code reviews for enterprise clients

Information Security Consultant at Alten (2016-04 – 2016-12)

Supported security operations through incident response, SIEM analysis (Splunk), phishing campaign management, and automation of network monitoring processes.

• Supported security operations through incident response, SIEM analysis (Splunk), phishing campaign management, and automation of network monitoring processes

Infrastructure Security Engineer / Consultant at Dimension Data NV/SA (2013-10 – 2016-03)

Implemented and supported security infrastructure solutions, including firewalls and proxies, for major enterprise clients.

• Implemented and supported security infrastructure solutions, including firewalls and proxies, for major enterprise clients

Master of Science in Industrial Engineering, specialised in Information Technology – ISIB (2009 – 2013)

Bachelor of Science in Industrial Engineering, specialised in Electrical Engineering – ISIB (2008 – 2011)

Professional Bachelor's Degree in Electro-Mechanical and Maintenance – HEBP (2007 – 2010)