Senior Information Security & Risk Management Leader

Máté
Lendvai

Information security · Risk · AI governance · Frankfurt am Main

I help organisations make better decisions when technology is moving faster than they're ready for.

Máté Lendvai
Book a 30-min call →

Bring a project, a role, a CISM or CRISC question, or just ask how I work. No prep needed.

About me

My Story

Technology has never been the hardest part. People are.

For over 20 years, I have been bridging business, information security, IT, corporate governance, and artificial intelligence (AI). I firmly believe that strong leaders create clarity by transforming technical challenges into business opportunities. My role is to help others make better decisions, not to make those decisions for them.

In my work, I focus on developing people and solving complex problems. It is essential to me to build teams where trust takes precedence over hierarchy, not just because it sounds good, but because I have seen what happens when this is missing. This principle has guided me throughout my entire career, both professionally and personally. Consequently, alongside my primary professional activities, I also engage in mentoring and training, leveraging the experience and qualifications I have gained. I pursue both areas in parallel; they complement one another, keep me motivated, encourage continuous learning, and help me recharge.

Outside of work, I play competitive basketball. This has taught me that communication and knowing when to step back are more important than individual performance. I strive to integrate this mindset into every team I work with.

Currently, I focus primarily on the intersection of artificial intelligence, information security, and risk management. The true competitive advantage will not lie in who possesses the most AI solutions, but rather in who can combine them with an effective governance framework and sound decision-making. I assist organizations throughout this process.

Latest from my LinkedIn

Posts

Thoughts and news on information security, leadership, career - updated regularly.

View all posts on LinkedIn →

When it comes to CRISC, the hardest part isn't just one risk concept. It is holding them all in head at once: inherent vs. control vs. residual risk, the three-line model, the four domains, the 4 Ts, KRI vs. KCI vs. KPI. So I created something to solve this for the next person. For you!

Read more →

It's not the certificate itself that's important here, but the acquisition and application of a different perspective in addition to everyday work. It's for such results that I love and find it worth doing this hobby, to be able to coach people/teams for their further development...

Read more →

I have cleared the ISO 27701:2025 Lead Auditor certification. My goal is to become more effective at helping and mentoring companies to manage risk, security, privacy, and governance challenges from multiple perspectives...

Read more → 16 reactions
On stage & in front of people

Events

Speaking engagements, coaching, training, and panel discussions on cyber resilience, risk management, security strategy, and leadership.

2026
Round table

Next IT Security

DACH Edition · Frankfurt

26 November 2026

Coming soon…

Event page →
2026
Training

Fabulous Tallinn!

I would like to thank the Ericsson team in Estonia for their interest and attention, as well as for the opportunity to share my experiences with them and assist them in preparing for the ISO 22301 audit.

View post →
Calendar

Calendar

Where I'm training, coaching and mentoring. Hover over or tap a day to see what's on.

  • Training
  • Bootcamp
  • Coaching
  • Mentoring
  • On stage
    What I offer

    Services

    Available for the following services:

    CISO · CIO · Enterprise Risk Management

    Organizations bring me in when technology is moving faster than their leadership can keep up with. I work as CISO, CIO, or Enterprise Risk Manager to close that gap. I build the governance, the team habits, and the decision-making frameworks that make sure the right calls get made before the wrong ones become expensive.

    Coaching · Presenting · Training

    I coach individuals and teams preparing for CISM, CRISC and CISSP exams, for GDPR and DPO roles, and for working with DORA, ISO 22301 and RCA techniques. I've done the work and been through the exams myself, so I know where people get stuck, and it's rarely the parts they expect. Sessions are practical, built around your schedule, and focused on passing, not just covering the material.

    Security leadership when you need it. Coaching that gets your team certified. Let's talk.

    Book a 30-min call → Write to me →
    Resources

    Shop

    What are you here for?

    Professional study materials created from my real exam and field experience. In risk terms: controls. They are not a substitute for the official material, but they show you what you will encounter on the exam.

    C-01Objective: Pass CRISC on the first attempt
    Prep Notes

    Risk & Information System Control Study Notes (CRISC)

    This exam preparation material was made for you for a reason. Because if I had had such a structured and realistic exam expectation summary material, I could have saved more time, energy and money. Learn from my mistake.

    €17
    Buy this →
    C-02Objective: Rehearse the real exam
    Prep Test

    Risk & Information System Control Study Notes (CRISC) Mock Test

    Based on my study notes, I've created a set of practice questions covering the most important topics, designed to boost your confidence and simulate the actual exam environment. Finally, real questions without filler content, complete with explanations and fully tailored to your needs. This is what will set you apart from the rest.

    €12
    Buy this →
    C-03Objective: See the whole CRISC picture
    Prep Graph

    CRISC Mission Control Infographic

    I have prepared a free, concise summary that is an excellent reminder and food for thought. This will "put the picture together" and make you more confident. It contains tips and tricks that reflect the expectations of the exam. A crumb party before the release of the larger "Risk & Information System Control Study Notes (CRISC)".

    Free
    Open →
    C-04Objective: Pass CISSP (in the works)
    Prep Notes

    Certified Information Systems Security Professional Notes (CISSP)

    Eight domains and an exam that wants you to think like a manager, not an engineer. These notes come from two places: what I teach in my CISSP bootcamps, and what I experienced in the exam myself. Same structured, no-filler approach as my CRISC notes: what comes up, where people get stuck, and how to read the questions.

    Soon
    Podcast

    Uncontrolled

    Coming soon

    Conversations about security, risk, AI and people, where nobody follows a script.

    Security

    Controls. Security controls. Risk controls. Access controls. Impulse control? Out of scope.

    Risk

    Something uncontrolled is inherently interesting.

    AI

    Where security, risk and AI get out of control.

    People

    People are unpredictable. Organisations are unpredictable.

    Podcast philosophy

    Because apparently someone thought giving humans technology was a good idea.