Solomon
Erkineh
Dedicated Information Security & IT Risk professional with deep expertise in infosec controls, audit coordination, and enterprise risk reporting. Currently driving security visibility at Commerzbank, Prague.
Securing Systems,
Managing Risk
With over 4 years of hands-on experience across banking, financial data, and pharma sectors, I specialise in building resilient security frameworks that protect enterprise assets and satisfy regulatory requirements.
My work spans vendor risk assessment, security awareness programs, access recertification, and executive-level risk reporting — giving boards and CISOs the clarity they need for confident, risk-informed decisions.
Holding an MSc in Systems Engineering & Informatics and an (ISC)² CC credential, I combine academic rigour with real-world delivery — most notably leading a full SOC 2 certification from the ground up.
Experience
Companies
Led End-to-End
Certifications
Professional
Experience
- Collaborate with Regional CISOs across four regions to define and continuously improve information security reporting and risk visibility at enterprise level.
- Collect and analyse security incidents, vulnerabilities, and threat trends to produce actionable executive intelligence.
- Develop concise dashboards and executive reports supporting risk-based decision-making for senior management and the Group CISO function.
- Standardise reporting practices enterprise-wide in alignment with the Group CISO office.
- Assessed vendor security controls via Due Diligence Questionnaires (DDQs) and compliance reports; identified and mitigated supply-chain security gaps.
- Led end-to-end SOC 2 certification — achieved compliance within the projected timeline; received positive feedback from external auditors.
- Conducted quarterly physical and logical access recertification programmes, reporting results directly to the CISO.
- Coordinated internal and external IT/IS audits across the organisation.
- Designed and delivered security awareness training and monthly phishing simulation campaigns.
- Developed KRI/KPP metrics and board-level reports to surface key risk indicators.
- Created and continuously improved the Information Security Framework (policies, standards, processes) aligned to ISO 27001.
- Collected and analysed cyber threat data to drive risk-based decision-making and enhance cyber defence posture.
- Contributed structured threat intelligence reports that shaped proactive defence strategies across the organisation.
Skills & Expertise
InfoSec
Clients
Led
Certs
Education
Certifications
Let's Build Something
Secure Together
Open to new opportunities, collaborations, and conversations in the information security space. Based in Prague — available internationally.