Position: GRC (Governance, Risk and Compliance) Security analyst
Category: Security
English level: fluent
Years of experience: 7

I was one of the senior legal experts in the IP company and have trained and mentored many interns throughout my whole career. The cases I have handled have around 70% of success. Unsuccessful cases usually end up with an amicable settlement. 

Now I am working in Information Security and GRC (Governance, Risk and Compliance) in the role of Information Security and Compliance Analyst. 
I have built BCP and DR policies/ procedures, GDPR assessments, Information Security assessments and internal audits from scratch; created and successfully implemented a GDPR-compliant strategy for international data transfers (to the third countries); creating the compliance frameworks for different privacy jurisdictions (mostly US different states).
My work experience consists of almost 6 years as a lawyer and 1 year as an Information Security and Compliance Analyst.
My experience includes:
- developing Data Protection, Privacy, Information Security, Risk Management, BCP, DR and IP rights protection strategies; 
- Privacy, Data Protection and Information Security compliance, risk, impact assessments, audits, business continuity planning;
- drafting and reviewing contracts, policies and procedures, compliance, business continuity, disaster recovery plans, assessment and audit reports;
- delivery of Information Security and Data Protection trainings to the staff.
I am specializing in compliance with:
- Data Protection/ Privacy (including healthcare, financial, and biometrics data protection) regulations (US, Canada, Brazil, South Africa, Australia) (GDPR, PCI-DSS, HIPAA, etc.);
- ISO, NIST, OWASP Information Security standards.
I handle legal representation of clients' interests before the third parties and the official bodies by handling negotiations, drafting petitions, responses, claims, appeals, motions, briefs and conducting official correspondence. 
I provide legal advice on Data Protection, Privacy, Information Security, Cyber Security, and IP matters, and support pre-trial settlement, and litigation at all stages.
Main specializations: International Law, IT Law, Information Security, Cyber Security, Data Protection, Privacy, Risk Management, GRC management, Business Continuity and Disaster Recovery, Regulatory Compliance, IP law.
Jurisdictions: EU, USA, Canada, Brazil, South Africa, Australia, Asia, Ukraine.
Languages: Ukrainian; English; French.
I am extremely motivated to constantly develop my skills and grow professionally by the way of broadening the spheres of my specialization. 
I would like to broaden my expertise in Information Security, Legal and Privacy counseling, and compliance practices. I am aiming at leadership positions, ready to work hard for career growth. I am open to new areas of security, compliance, and legal practice. 
I would highly appreciate a flexible schedule, remote work, opportunities for studying, strong corporate culture, and employee appreciation. For me, it is important when the company is interested in my professional and personal growth and provides opportunities for self-education, including obtaining certifications and/or educational degrees.