Michal Kurek

Partner at KPMG | Head of Cyber Security in CEE and Poland | OWASP Poland Chapter Leader

Warsaw, Mazowieckie, Poland

About

Head of Cyber Security in KPMG CEE region and leader of KPMG Cyber Security competency center in Poland. His team of experts specializes in wide area of cybersecurity aspects: applications, infrastructure, architecture, cloud, AI and operations. Board member of OWASP Poland and SANS Institute Mentor in the area of web applications security. International Certified Coach. Specialties: - application security advisory - network security consulting - cloud security - AI security - red teaming - cybersecurity architecture and transformation - industrial control systems protection - cybersecurity forensics and incident response - crisis management and business resilience - identity and access management - privacy and data protection - IT risk management advisory - PKI advisory and assurance (WebTrust, eIDAS) Views expressed are my own

Experience

  • KPMG Poland (9 yrs)
    • Head of Cyber Security in KPMG CEE region
      Oct 2020 - Present · 5 yrs 10 mos

      Coordination of Cyber Security practice accross the KPMG CEE region. Cooperation with global KPMG Cyber Security network to develop and bring to CEE clients cutting edge cyber security services and competencies. Streamlining the near shore support from CEE cyber security competency centers to EMA and global KPMG member firms.

    • Partner
      Aug 2017 - Present · 9 yrs

      Leader of KPMG Cyber Security competency center in Poland - team of experts specialized in wide area of cyber security aspects: applications, infrastructure, architecture and operations; both in IT and OT/IoT environments. The team helps organizations to protect against hackers and responds to cyberattacks.

  • EY (14 yrs 10 mos)
    • Executive Director
      Jul 2014 - Jun 2017 · 3 yrs

      Leader of the biggest technical cybersecurity consulting team in Poland specialized in wide area of cybersecurity aspects: applications, infrastructure, architecture and operations Framework cooperation with most of Polish banks and the Polish Bank Association Co-ordination of cyber security activities across Central and Southeastern Europe region within EY

    • Senior Manager
      Oct 2012 - Jul 2014 · 1 yr 10 mos

      Dynamic expansion of Advanced Security Center team including development of unique cybersecurity competencies: application source code reviews, mobile applications assessments, IoT security reviews, ERP penetration testing, SOC/SIEM optimization, Red Teaming, etc.

    • Manager
      Sep 2007 - Sep 2012 · 5 yrs 1 mo

      Development from scratch of Advanced Security Center – EY competency center for technical aspects of cybersecurity in the Central and Southeastern Europe region Coordination of cybersecurity audits and transformational projects (network security, application security assessments, PKI certification audits)

  • System Analyst at Citibank
    Jan 2002 - Aug 2002 · 8 mos

    Implementation and technical support of the CitiConnect system (Internet credit card payment gateway)

  • Software Developer at Alcatel
    Apr 2000 - Jul 2001 · 1 yr 4 mos

    Development of application for countrywide ISP designed to capture IP network traffic for billing purposes Programming visualization module for network monitoring application Languages: Java, C, C++