George Mutune

IT Security Project Manager (NIS 2) at Tetra Pak

Nexer Group • Full-time

Nov 2023 - Present • 2 yrs 11 mos

Cybersecurity Programme Manager / Consultant Enterprise Cybersecurity | Sweden Lead and coordinate cybersecurity compliance initiatives, focusing on NIS2 readiness, security governance, risk management, and regulatory implementation. Support stakeholder coordination, control assurance, compliance roadmaps, and the operationalisation of information security requirements across enterprise IT/OT environments. Lead and coordinate enterprise cybersecurity compliance initiatives, with a focus on NIS2 readiness, regulatory implementation, information security governance, and risk management. Drive programme planning, stakeholder engagement, and cross-functional collaboration to translate regulatory requirements into actionable compliance roadmaps, clear roles and responsibilities, and measurable implementation activities. Support control mapping, assurance, evidence management, risk tracking, and management reporting, helping organisations transition from regulatory readiness assessments to sustainable business-as-usual security operations across IT and OT environments.

Cybersecurity Specialist - Governance, Risk, & Compliance

CyberMoran Solutions

Jan 2014 - Present • 12 yrs 9 mos

• Offering information and security management to clients globally • Developing solutions and programs around Governance, Risk, and Compliance • Developing and institutionalizing strategic plans to ensure accurate assessment of cybersecurity baseline • Developing strategic processes for aligning with compliance standards • Subject matter expert in ensuring security baselines meet criteria for an excellent rating in security audits • Creating and updating cybersecurity profiles based on NIST, ISO, and other standards • Creating standards and procedures for protecting the security and integrity of systems and data • Cybersecurity support to development teams to integrate information assurance during system life cycle development of applications

Cybersecurity Engineer Consulting for Alfa Laval

Nexer Group

Oct 2022 - Nov 2023 • 1 yr 1 mo

• Coordinated cybersecurity project activities and supported the integration of security and compliance requirements into product development. • Conducted gap assessments, supported asset inventories, and contributed to risk-based security testing. • Prepared technical and compliance documentation to support reviews and regulatory approval processes involving classification societies. • Worked with engineering teams to support secure solution handover and deployment. • Delivered user awareness training on information governance and compliance. • Researched cybersecurity technologies and solutions relevant to automation systems. Selected contribution: Supported the integration of cybersecurity practices into engineering and product-development activities in a complex industrial environment.