Mateusz N.-Cybersecurity Governance Lead | Security Management Systems | Trainer
Check rate
Experience
Security Consultant | Head of Security Management System
Intellias
Governance, management responsibility & training:
- Board reporting: report the status of the security management system to the management board - risk posture, audit findings, certification readiness and improvement initiatives - so that leadership can take informed, accountable decisions.
- Training & awareness: designed and run the security training programme - roles and responsibilities, secure processes, threat awareness - adapted to engineers, project managers and leadership.
- Policies & roles: defined security policies, processes, roles and responsibilities, review checklists and templates for the whole organisation.
- Audit: plan and perform internal audits and drive findings to closure; prepared the organisation for and led external certification (June 2025).
Risk, incidents & real-world attack scenarios:
- Risk assessment: run end-to-end threat analysis and risk assessment for new products and features, turning realistic attack scenarios into risk decisions, security goals and controls.
- Incident & vulnerability management: own weakness and vulnerability analysis, triage and continuous monitoring across the product lifecycle.
- Security architecture: define and review controls for authentication and access control, secure communication, security logging and intrusion detection.
Supply chain & regulation to practice:
- Supply-chain risk: assess vendors - supplier cybersecurity capability evaluations, cybersecurity interface agreements and risk assessment of third-party and off-the-shelf components.
- Compliance: turned requirements from the EU Cyber Resilience Act, UN R155/R156 and ISO/SAE 21434 into practical, auditable processes with clear ownership.
- AI governance: assess AI tools before adoption (data handling and retention, access control, output reliability, vendor terms) and keep AI security guidance aligned with NIST AI RMF and ISO/IEC 42001.
- Consulting: as an independent consultant, set up security processes and product risk management for automotive OEMs.
Safety & Security Expert
BCS Automotive Interface Solutions
- Designed and rolled out corporate security and safety processes (ISO/SAE 21434, ISO 26262) that project teams could apply on their own.
- Owned quality assurance, risk management and internal audits for security- and safety-critical projects.
Lecturer in Functional Safety
Warsaw University of Technology
Functional Safety Manager
AVL Software and Functions GmbH
- Managed functional safety across the full development lifecycle; achieved ISO 26262 certification of an ASIL C battery management system.
- Performed systematic risk analyses (DFMEA, FTA, DFA); evaluated third-party components before use in critical systems.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Automotive, Information Technology, and Education.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Audit, Information Technology, Quality Assurance, and Product Development.
Summary
Cybersecurity governance leader with 8 years of experience building, running and certifying security management systems in a highly regulated, safety-critical industry. I designed a company-wide security management system from scratch - policies, roles, risk assessment, incident and vulnerability handling, internal audits - and led it to external certification in 2025.
I report security posture, audit findings and risk to the management board, and I designed and run the organisation's security training programme. I translate regulation (EU CRA, UN R155, ISO standards) into clear responsibilities and processes that teams and managers can own.
MBA in Finance & Technology: I explain cyber risk in business terms - impact, accountability and investment decisions - which is what management audiences need. Former university lecturer; member of ISO working groups shaping international security standards.
- Built a security management system from scratch - governance, policies, risk management, audits and training - and achieved external certification (ISO/SAE 21434, June 2025, TÜV Nord GmbH).
- Established regular security reporting to the management board: risk posture, audit findings, certification readiness and improvement initiatives that secured decisions and resources.
- Designed and run the company security training programme; lecturer in Functional Safety at Warsaw University of Technology (2020).
- Member of ISO/TC 22/SC 32 working groups (since 2023) shaping international cybersecurity standards.
Skills
Security Governance
- Security Management System Design & Operation
- Management Board Security Reporting
- Security Training & Awareness Programmes
- Cyber Risk Assessment & Threat Modelling (Stride, Tara)
- Incident Response & Vulnerability Management
- Internal Audits & Certification Readiness
- Supply-Chain & Third-Party Risk
- Security Policies, Roles & Responsibilities
- Ai Tool Risk Assessment
Frameworks & Regulations
- Nis2 Directive & Management Accountability
- Gdpr - Security Incidents & Breach Notification
- Iso/Iec 27001:2022, Iso/Iec 42001
- Nist Csf 2.0, Nist Ai Rmf
- Enisa Guidance & Threat Landscape
- Eu Cyber Resilience Act (Cra)
- Owasp Top 10 For Llm Applications
- Iso/Sae 21434, Un R155 / R156
- Iso 26262
Technical & Ai
- Multi-Agent Llm Systems (Langgraph, Claude Api)
- Llm Evals & Output Validation
- Ci Security Gates: Codeql, Gitleaks, Dependency Audit
- Sbom: Cyclonedx, Spdx
- Python (Fastapi), Postgresql, Next.Js
- Docker, Terraform, Github Actions, Azure Devops
Languages
Education
Warsaw Univ. of Technology Business School
MBA · Finance & Technology (FinTech) · Warsaw, Poland
Warsaw Univ. of Technology
MSc · Electrical Engineering · Warsaw, Poland
Warsaw Univ. of Technology
BSc · Electrical & Hybrid Vehicles · Warsaw, Poland
Certifications & licenses
UL-CAIP Artificial Intelligence Professional
UL Solutions
UL-CSSP Cybersecurity Professional
UL Solutions
Automotive Cybersecurity Professional
SGS-TÜV Saar
Safety Analysis
Kugler Maag
ISO 26262 Basic
TÜV Rheinland
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Mateusz is based in Warsaw, Poland.
Mateusz speaks the following languages: Polish (Native), English (Advanced), German (Elementary).
Mateusz has at least 8 years of experience. During this time, Mateusz has worked in at least 4 different roles and for 4 different companies. The average length of individual experience is 2 years and 1 month. Note that Mateusz may not have shared all experience and actually has more experience.
Based on recent experience, Mateusz would be well-suited for roles such as: Security Consultant | Head of Security Management System, Safety & Security Expert, Lecturer in Functional Safety.
Mateusz's most recent position is Security Consultant | Head of Security Management System at Intellias.
In recent years, Mateusz has worked for Intellias and BCS Automotive Interface Solutions.
Mateusz is most experienced in industries like Automotive, Information Technology, and Education.
Mateusz is most experienced in business areas like Audit, Information Technology, and Quality Assurance. Mateusz also has some experience in Product Development.
Mateusz has recently worked in industries like Automotive and Information Technology.
Mateusz has recently worked in business areas like Audit, Information Technology, and Quality Assurance.
Mateusz holds a Master in Finance & Technology (FinTech) from Warsaw Univ. of Technology Business School, a Master in Electrical Engineering from Warsaw Univ. of Technology and a Bachelor in Electrical & Hybrid Vehicles from Warsaw Univ. of Technology.
Mateusz has 5 certificates. Among them, these include: UL-CAIP Artificial Intelligence Professional, UL-CSSP Cybersecurity Professional, and Automotive Cybersecurity Professional.
The availability of Mateusz needs to be confirmed.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 6 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Thomas K.
Christian F.
Pierre G.
Nikolaus B.
Daniel J.
Federico L.
Valeri M.
Alexander S.
Henryk O.
Bernhard B.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Security Consultant | Head of Security Management System
Alicja W.
Flamur A.
Christian D.
Christian E.
Enrique G.
Mahmoud Q.
Henry H.
Dustin D.
Markus W.
Andreas R.
Nearby freelancers
Professionals working in or nearby Warsaw, Poland
Maciej M.
Mari K.
Jacek B.
Daniil K.
Makpal I.
Mateusz Ł.
Bartosz L.
Katarzyna A.
Łukasz O.
Andrzej K.
