Palmer Colamarino

• Coordinated several projects for the Global Director of NSHD Worldwide Cybersecurity (rewriting of ISMS Policies, Standards and Guidelines, Vulnerability Resolution & Incident management, Risk management, Network IT/OT segregation, Purdue framework, and Cloud hardening, NIS2 compliance) • Led Worldwide IT Pentest Redteam exercise in Australia, Europe, Japan and USA • Led OT Risk Assessment exercise in Korea, Vietnam, Singapore. • Led the selection process and PoC of several Cybersec tools. ( e.g. Antiphishing, External Surface Scorecards).

• Coordinated CISO office strategy (ISMS, NIS2, Vulnerability & Incident management, Risk management) • Led IAM team, managing Identity Credential & Access policies included PKI management and HSM, • Managed ISO27001 based ISMS implementation to comply with NIS2 EU directive

• Designed and implemented a new ISMS based on ISO 27001 (Policies and Standard Operating Procedure) • Represented the CISO Office in GDPR project review board with DPO office about security related issues. • Represented the CISO Office on the the Architecture and Change Mgt. Boards. • Defined the requirements, participated to all the RFI/RFP phases that led to the selection of the IT&Security provider of the new SDWAN, LAN, SIEM, CSIRT, Vuln.Scan., -- as a Service contract . • Implemented a company wide Risk management framework based on ISO 27005, and the Data Classification & Protection Policy. • Selected and implemented of a new IGA (Identity, Governance and Administration) solution compatible with multiple OS environment (Windows 10, Azure AD, Linux, IBM Mainframe...) overarching the IAM process. • Designed and Implemented a new Incident Mgt Policy and a Vendor Cybersecurity screening policy. • Led the design and implementation of a company wide Cybersecurity awareness program.

Analysed, evaluated and ranked a number of proposals for the European Defence Industrial Development Programme of “Cyber situational awareness and defence capabilities, military networks and technologies for secure communication and information sharing”.

• Managed the full project cycle from the risk analysis, requirements gathering, design, vendor selection (RFQ) for the implementation of the 50Ml Euro new PKI/IAM management (from project inception, business case drafting and presentation to the NATO international financing committee for approval). • Led the project for the customization design and implementation of an ITSM system based on BMC Remedy. Managed the vendor management interface in close collaboration with NATO Acquisition dep’t. • Managed all phases of a NATO Cyber-tightening and Data protection project (Risk Analysis & Design, Site surveys, Advised on Cybersecurity Capability deployment issues. Witnessed technical acceptance tests, approved the final technical documentation. • Managed the Phase I and Phase II of the Cyber-IT coverage project of NATO new HQ implementing a logging capability based on Archsight and then Splunk SIEM software for the NATO Office of Security in preparation of the NATO Head of state Summit of 2018 . Prepared and performed forensic tests. • On-boarded 10 NATO bases worldwide on SIEM/Cybersec defence infrastructure .

The PANOPTESEC consortium will deliver a beyond-state-of-the-art prototype of a cyber defence decision support system, demonstrating a risk based approach to automated cyber defence that accounts for the dynamic nature of information and communications technologies (ICT) and the constantly evolving capabilities of cyber attackers. "Panoptes" is an ancient Greek term meaning "all eyes" or "all seeing".

For Infrabel, Belgium : • Directed the project for the design, contractor selection and deployment of a new IT Command & Control system (SCADA & OT) to control Belgian Railway High-Voltage Distribution Network which includes 5 separate regional systems. • Conducted formal audit of the existing 2 nationwide IT systems and the supporting Telecom infrastructure, designed strategy, proposed changes to support deployment and facilitate testing. • Directed the IP Security Test group (e.g.: MIM and DDOS attack) responsible for addressing vulnerabilities of the IP/CS104 network by performing vulnerability assessment, penetration tests, analysis, and identifying proposal to reduce enterprise risk and ensure a better cybersecurity posture. • Conducted a cybersecurity training based on tools such as Kali Linux, Nmap, OpenVAS, Metasploit, For ACEA Italy • Performed cybersecurity maturity assessment of the Power metering SCADA/OT control system of ACEA city of Rome infrastructure

01/2005-12/2009; 01/2011-12/2014 Conceived the business plan and steered the company through all steps from its inception to becoming fully operational; headed vendor/product selection functions, managing partner and channel selection in addition to developing a partnership contract with an ITC service provider. Controlled budgets of up to €1.5M per year. Built relationships with customers in 4 countries throughout Europe and the Middle East. Appointed to restructure business activities which encompassed downsizing and outsourcing activities. Redefined and established a strategy to transform the company from a hardware sales-based business to providing a full-range of hardware and service offerings to small and mid-range ISP providers, redefining the products and services portfolio. ✔ Boosted sales by 25% in the last 9 months. ✔ Drove sales from zero to €2M in 4 years through changing strategy and expanding the products and services portfolio. ✔ Renegotiated the company’s debt with financial institutions and suppliers, negotiating an additional €150K in credit. ✔ Represented Netaly's equity interests in all the phases of the equity deal construction (Term sheet, Shareholders Agreement, Start-up charter, Financial Plan, etc..) of the creation of a start-up.

Reported to Head of Roaming Department. Presented proposal for the Mobistar-Telenet Roaming interconnection agreement to Mobistar Board (CEO, CFO, and CTO) for approval. ✔Reduced costs by €5M per year after reviewing Mobistar’s traffic steering process and identifying strategy to redirect roaming traffic more efficiently. ✔Secured profitable relationship worth more than €10M annually.