Position: GRC Security Expert
Category: Security
English level: upper
Years of experience: 11

As a Security Consultant:
	Security Governance, Risk and Compliance (ISO27001, SOC2, PCIDSS, HIPAA/HITRUST, GDPR, FedRAMP, NIST, etc.);
	Cyber Security assessments and audits (maturity security, compliance security);
	Cyber Security processes implementation and management;
	Cloud Security (AWS) consulting.

As a Regional Cyber Security Leader: 
•	Information Security organization, management, coordination, control and maintenance (including Business support from security perspective);
•	Security processes design and implementation: Security Risk Assessment, Security Incident Management, Business Continuity Management, Awareness campaigns, etc.;
•	Project Management;
•	Europe and Global level of responsibilities.

As a Chief Information Security Officer (CISO): 
•	Information Security organization, management, coordination, control and maintenance (CISO’s job functions);
•	Information Security Management System implementation (based on the local information security standard similar to ISO 27001).
15+ years in the Cybersecurity area.

1. Governance, Risk and Compliance (GRC).

2. Information Security Standards & Methodologies & Frameworks
•	ISO 27001 
•	SOC2
•	PCI DSS 
•	HIPAA
•	NIST CSF
•       GDPR
•	COBIT, ITIL, etc.

3. Security Management and organization:
•	CISO role
•	Risk Management
•       Information Security assessments and audits
•	Information Security processes implementation and management (e.g., Vulnerability Management, Identity and Access Management, Incident Management, Business Continuity Management, etc.)
•	Physical Security.

4. Project Management (general activities).
Innovative cyber security projects.