Resume
Predrag Tasevski
Cybersecurity and Privacy Executive | CISO | vCISO
predragtasevski.comBerlin, Germany | predragtasevski.com | pece@predragtasevski.com | linkedin.com/in/tpredrag
About
Cybersecurity and privacy executive with 15+ years of experience leading information security, cloud security, and compliance programs across FinTech, SaaS, and regulated environments. Built and ran ISMS and privacy-by-design programs and led ISO/IEC 27001, DORA, PCI DSS, SOC 2, and ISO/IEC 42001 initiatives, reporting to the CTO with direct access to the C-level and presenting to the board every quarter. Experienced with BaFin/MaRisk and De Nederlandsche Bank expectations. Founder of Unicis.Tech and advisor to EU-funded innovation projects (OSCRAT, CyberSec4OT, VIC, SAFE SPORT). Certified CISO, DPO, ISO 27001 Lead Auditor, ISO 42001 Lead Implementer, DORA Lead Manager, and CPSP. Holds a Master's degree in Cyber Security and a post-master's degree in Security in Computer Systems and Communications.
Core Competencies
Key Achievements
- Zero non-conformities across the ISO/IEC 27001 initial, transition, and surveillance audits at Mondu, plus zero findings in the annual financial ITGC audits.
- Scaled the security and IT organization as Mondu grew from 51 to over 200 employees; owned the certification, penetration test, and IT budgets.
- Presented KPIs, risk gaps, and program status to the board every quarter; primary contact for auditors and regulators (BaFin/MaRisk, DNB).
- Completed a full NIST gap analysis in under 4 months at Spark Networks and started the program toward the target maturity level.
- Founded Unicis.Tech and delivered four EU-funded projects (OSCRAT, CyberSec4OT, VIC, SAFE SPORT) as cybersecurity advisor and DPO.
Work Experience
Founder and CEO
Founder and CEO of a start-up building an open-source GRC (Governance, Risk Management, and Compliance) SaaS platform and Atlassian apps for security, compliance, and privacy teams. Customers range from start-ups and SMEs to enterprises.
- Lead product, engineering, and go-to-market for an open-source GRC platform aligned with CRA, DORA, NIS2, ISO 27001, and GDPR, competing against large commercial vendors and open-source tools.
- Senior cybersecurity advisor and DPO on EU-funded projects: OSCRAT, CyberSec4OT, VIC, and SAFE SPORT.
Director of Cybersecurity
Joined as Head of Cybersecurity and was promoted to Director of Cybersecurity. Reported to the CTO with direct access to the C-level and presented to the board every quarter. Owned the company-wide information security and privacy strategy for a regulated FinTech, scaling the Corporate IT and Security Operations teams as the company grew from 51 to over 200 employees.
- Led ISO/IEC 27001 certification: the initial certification audit (27001:2013), the transition to 27001:2022, and the surveillance audits all closed with zero non-conformities.
- Passed the annual financial IT general controls (ITGC) audits with zero findings, and built the DORA register of information.
- Completed the PCI DSS Level 2 self-assessment and started the SOC 2 Type II preparation and the ISO/IEC 42001 (AI management system) work.
- Owned the budgets for ISO 27001 certification, the annual penetration test (about 10-15k), and corporate IT, internet, and office equipment.
- Primary executive contact for auditors, regulators (BaFin/MaRisk, De Nederlandsche Bank), and enterprise customers.
Mentor for Cybersecurity Bootcamp
Springboard, Remote, US
Mentored professionals transitioning into cybersecurity careers, with guidance on cloud security, governance, and career development.
Director Cyber Security
Spark Networks GmbH, Berlin, DE
- Completed a full NIST framework gap analysis in under 4 months and started the program toward the target maturity level.
- Assessed the enterprise security posture and delivered a company-wide security transformation roadmap.
- Established security metrics and executive reporting; covered risk management, compliance, and awareness.
Head of IT Security
FinTech, Berlin, DE
- Led enterprise risk assessments and security compliance programs.
- Implemented security policies and business continuity, disaster recovery, and access control frameworks.
Information Security Officer (ISO)
- Operated and maintained the ISMS.
- Led incident response, vulnerability disclosure, and security awareness; advised senior management on emerging threats.
Senior Cloud Security Engineer (Acting as Head of IT Security)
Information Security Leader responsible for defining, implementing, and enhancing the company's security posture.
Senior Security Consulting Consultant
Cloud Security Advisor with experience in digital transformation, GDPR compliance, and cloud computing security controls.
Business Functional Analyst / Security Controls Manager (Independent Consultant)
ENFINA- Security s.r.o, Frankfurt am Main, DE
Business Functional Analyst and Security Controls Manager with experience in ITIL, Agile, risk management, compliance, and IT security controls.
Intern: Cyber Security Researcher
Cyber Security Researcher with experience in incident response, digital forensics, cyber audit, cyber risk assessment, penetration testing, and cloud security architecture.
Technical Author
Remote - INACON GmbH, Karlsruhe, DE
Technical documentation writer with experience in GPRS/UMTS/LTE telecommunication protocols and Wireshark implementation for troubleshooting.
Team Manager Class
Stream International Bulgaria, Sofia, BG
Technical trainer and support specialist with experience in Microsoft products and advanced troubleshooting.
Education
Post-Master (Diplôme d’Ingénieur de Specialisation)
Security in Computer Systems and Communications
Awarded with scholarship Labex UCN@SOPHIAMaster of Science in Engineering
Tallinn University of Technology (TTU) and Tartu University, Estonia
Cyber Security
Awarded with scholarship DoRa 9High School
Champlin Park High School, Minnesota, USA
Informatics
Certifications
PECB ISO/IEC 42001 Lead Implementer
Certification number: 7756927-2026-08
Skills: (AI) Implementation, Artificial Intelligence (AI). Artificial Intelligence Management Systems
PECB DORA Lead Manager
Certification number: 6338938-2026-08
Skills: Digital Operational Resilience, ICT Risk Management, Incident Management
Industry Contributor: Cyber Secure Software Developer (CSSD) Exam CSD-110
The Linux Foundation LFEL1001: Understanding the EU Cyber Resilience Act (CRA)
PECB Chief Information Security Officer
Certified Payment Security Practitioner v2.0
Certificate ID: CPSP01042401
Certified Data Protection Officer (DPO)
Certificate ID: 001/DPO/2023
Lead/External Auditor for Information Technology Service Management ISO/IEC 20000-1:2018
Certificate ID: 003/ITS/2023
Lead/External Auditor for ISMS ISO/IEC 27001:2022
Certificate ID: 002/ISMS/2023
Industry Contributor: Cyber Secure Coder (CSC)
CertNexus Certifications Industry Contributor: CyberSec First Responder (CFR)
Certified Project Manager
PM C1 - PM² Essentials
Project Management Methodology
Certified Senior Scrum Master
Microsoft Certified Trainer
Microsoft Certified Professional ID: 6083756
Lead/External Auditor for ISMS ISO/IEC 27001:2005
Certificate ID: 026/ISMS/2013
Google Cloud: Managing Security in Google Cloud Platform
Coursera
Google Cloud Platform Fundamentals: Core Infrastructure, Core Services, Essential Cloud Infrastructure Foundation, Elastic Cloud Infrastructure: Scaling and Automation
Coursera
AWS Security Fundamentals, and Migration Methodology, Process, and Tools
Amazon training
Introduction to AWS Lambda, Elastic Load Balancer, Classic, Application, Container Service, Elastic Compute Cloud (EC2), AWS Compute Services Overview
Amazon training
CyberArk PAS Administration
CyberArk Training, Self-Paced Course
Introduction to CyberArk Privileged Access Security Course, Certified Trustee
CyberArk Training
Memberships
Language Skills
Macedonian (native); English, Bulgarian, Serbian, Croatian (advanced); German (basic)
Technical Skills
Languages and Libraries
React, NextJS, NodeJS, 11ty, Python, Emacs Lisp, C++, Bash, HTML, Java, JavaScript, CSS, PHP, MySQL/Oracle PL/SQL, R
System Administration
Experience with system administration on Debian & RPM based systems and Bash scripting.
Version Control
Git
Connect
I enjoy connecting with professionals, founders, and teams working on cloud security, identity & federation, compliance automation, privacy engineering, AI security, and secure digital transformation. Whether you're building resilient systems, tackling compliance challenges, or iterating on secure architectures, reach out — I’d love to collaborate or talk through ideas.
Cloud & GRC Security
Architecture, Security and Privacy by design and default
Identity & Federation
SSO, OAuth/OIDC at Scale
Compliance & Automation
ISO, GDPR, NIST, DORA, CRA, NIS2
AI & Security
AI Infrastructure, AI Management System & Risk