Hristiyan Lazarov

Hristiyan brings over 18 years of experience in financial services and consulting, leading enterprise-wide security initiatives across multiple jurisdictions. He combines strategic expertise in security governance, regulatory compliance and transformation programs with hands-on technical depth in specialist disciplines— including threat modeling, threat hunting, digital forensics and malware analysis. His framework experience spans the Cyber Resilience Act, DORA, NIS2, CIS Top 18, and ISO 27001.

Prior to joining Kroll, Hristiyan was Group CISO at FWU AG, a life insurance group, where he advised board and executive leadership on strategic security initiatives, designing enterprise-wide security architecture that bridged technical controls with business objectives.

Previously, he served as Deputy CISO at PwC Germany, where he led complex cybersecurity assessments and advisory engagements across multiple industries. He has also held security leadership positions at Deutsche Bank, including Vice President of Cloud Security Architecture and Malware Response and Cyber Forensics Expert, where he developed cloud security frameworks and advanced threat detection capabilities using the MITRE ATT&CK framework.

Hristiyan’s professional experience includes designing and operationalizing security operations centers aligned with international standards such as NIST and CIS Top 18, leading a multiyear cybersecurity transformation initiative to align enterprise security strategy with regulatory and business objectives, and developing and implementing threat hunting strategies grounded in the MITRE ATT&CK framework.

Hristiyan holds a B.Sc. in information brokering and IT technologies at the University of Library Studies and Information Technologies. He also holds the following accreditations: Certified Information Systems Security Professional (CISSP), GIAC Certified Forensics Analyst (GCFA), GIAC Network Forensics Analyst (GNFA), GIAC Reverse Engineering Malware (GREM), CompTIA Advanced Security Practitioner (CASP) and ITIL v3 Foundation Certification.