← Home

Templates

About

Blog

Contact

Anthony K.

PROFESSIONAL SUMMARY

Cybersecurity leader with 15+ years of experience in GRC, third-party risk management, and digital transformation projects across the financial services sector. Proven track record in leading cyber audits, ISMS implementations, and IAM remediation programs for global banks and fintechs. CISSP, CISM, and CISA certified, with an MBA from ETH Zurich.

EXPERIENCE

Cyber Risk Manager Independent Consultant, Remote

Since September 2025

• Elevated the cybersecurity framework to CMMI Level 3 maturity as a fractional CISO for a fintech

       **U.S.A**

Digital Risk Manager Ernst & Young USA, California & Florida

March 2025 - September 2025

• Remediated 8 IAM audit findings and assessed 15+ regulatory remediation initiatives for two major US banks in 5 months

       **Switzerland**

Cybersecurity Manager Ernst & Young Switzerland, Zurich

July 2021 - March 2025

Specialized in cybersecurity governance, IT risk management, and digital transformation for global financial institutions.

• Led 15+ cyber risk assessments and regulatory audits for large financial institutions, identifying critical gaps and ensuring adherence to regulations and standards (e.g., NIST CSF, ISO 27001, FINMA, and DORA)
• Developed and implemented a cybersecurity strategy and governance model, enhancing the cyber posture and addressing TPRM regulatory requirements
• Managed cross-functional teams (up to 13 members) to remediate 16 regulatory findings by implementing an ISMS for a Swiss bank, including defining policies and establishing a control framework
• Supported CH business development in winning proposals worth over 2M CHF (cyber transformation, IT risk management, cloud security assessment, business continuity reviews, etc.)

Cybersecurity Expert - CISO Governance Credit Suisse, Zurich

October 2018 - June 2021

• Directed cybersecurity and risk management reporting activities of the CISO team for internal senior committees and regulators
• Addressed 50+ corporate clients’ annual due diligence inquiries on cyber and information security
• Coordinated divisional penetration testing efforts for 160+ apps in accordance with SOX and EBA regulations