IAM and IGA governance professional with 20 years of IT experience spanning identity controls, security governance, IT risk, GRC, infrastructure security and global network operations. Specializes in access reviews and certifications, identity lifecycle and leaver controls, privileged access governance, SOX control monitoring, audit readiness and identity data quality.
Combines technical understanding of enterprise identity and security environments with risk-based analysis, evidence-led controls, audit support and clear communication with business stakeholders, control owners and technical teams. Experienced in analysing identity, privileged-access, enterprise-directory and configuration-management data. Work with identity and security platforms focuses on governance, monitoring, reporting and analysis. Interested in senior specialist, SME, lead, consultant and business-facing IAM governance and IT risk roles.
Core Skills and ATS Keywords
Identity and Access Management (IAM); Identity Governance and Administration (IGA); IAM Governance; IGA Governance; Identity Controls; Access Reviews; User Access Reviews (UAR); Access Certifications; Identity Lifecycle Management; Joiner, Mover and Leaver (JML) Controls; Leaver Access Removal; Privileged Access Management (PAM) Governance; SOX ITGC; SOX IAM Controls; Audit Readiness; Audit Evidence; Internal and External Audit Support; Identity Data Analysis; Data Quality; Reconciliation; Control Monitoring; Risk-Based Governance; IT Risk Management; Governance, Risk and Compliance (GRC); Security Governance; Business Continuity; Disaster Recovery; Infrastructure Security; Network Security; Stakeholder Management; Identity Governance and Administration (IGA) platforms; Privileged Access Management (PAM) platforms; Enterprise directory services; enterprise-class Configuration Management Database (CMDB); PowerShell (basic); Generative AI research; AI-assisted source synthesis; AI-assisted document drafting
Professional Experience
Professional experience since February 2006. Employer names are intentionally omitted from this public profile.
Monitor and support SOX IAM controls, including recurring access reviews and certifications for privileged access.
Coordinate review-cycle completeness, data consistency, anomaly follow-up, corrections and audit traceability.
Analyse identity lifecycle and leaver access-removal controls, privileged access data and identity reports.
Support internal and external audits with evidence, control explanations and audit-ready documentation.
Review IAM reporting logic and data quality, identify inconsistencies and recommend practical process improvements.
Analyse identity governance, privileged access, enterprise directory and enterprise-class configuration management data to support governance, monitoring and control analysis.
Security Consultant
July 2022 – December 2022
Delivered information security training for security officers and contributed to an initial evaluation of a threat-modelling tool.
Cybersecurity Audit & Risk Advisor
June 2021 – June 2022
Advised on security compliance, business continuity and disaster recovery governance, and supported IAM process governance.
Senior Engineer, Security Solutions
March 2020 – May 2021
Advised application stakeholders on information protection, security and operational risk, vulnerability management, server hardening and compliance in regulated environments.
Risk and Compliance Specialist
October 2019 – March 2020
Supported compliance operations for applications and services.
Governance, Risk & Compliance Consultant
April 2017 – September 2019
Consulted on infrastructure and IAM risk, risk reporting, security vulnerabilities and governance of changes to IAM services and applications.
IT Risk & Continuity Planning Consultant
July 2014 – March 2017
Coordinated business continuity and recovery testing, infrastructure risk assessments, management reporting and governance activities.
Perimeter Delivery Specialist (secondment)
August 2013 – January 2014 · Concurrent assignment
Delivered changes and services in the network perimeter security domain.
Perimeter Operations Specialist
June 2010 – June 2014
Supported enterprise firewall and network security operations, security incidents and investigation of operational issues.
Junior / Network Analyst
June 2008 – June 2010
Supported global network operations, infrastructure incidents and changes in high-availability environments, working with service providers.
IT & Network Administrator
May 2007 – June 2008
Worked on network design, Linux-based terminal solutions, database monitoring and end-user support for electronic-signature services.
IT Support Specialist
February 2006 – April 2007
General information technology support.
Certifications
Certified Identity Governance Expert (CIGE), 2026
Certified Information Security Manager (CISM), ISACA, 2022 · Active
Microsoft Security, Compliance, and Identity Fundamentals (SC-900), 2022
Microsoft Azure Fundamentals (AZ-900), 2021
Check Point Certified Security Expert (CCSE), 2013
Additional professional development: AWS Cloud Quest and technology risk, security and cybersecurity conferences.
Practical use of generative AI: Uses AI to support research, synthesise information from sources and draft or refine professional documents. Reviews source material, checks and edits generated content, and remains responsible for the final result. This describes practical AI use, not AI engineering or model development.
Education
MSc in Engineering, Computer Science – Industrial Information Systems University of Zielona Gora · 2000–2005
Professional and Community Activities
Shares knowledge about information security, governance, risk and compliance.
ISSA Poland community member since 2025.
Security awareness presenter for microbusinesses, 2025.
Languages
Polish: Native · English: B2, Upper-Intermediate; professional working proficiency.