GRC and Information Security Lead

The candidate has 16 years of experience in IT security, governance risk and compliance and delivering enterprise wide cybersecurity programs. He led GRC programs across more than 170 accounts in regulated markets and implemented ISO 27001 and 27701 frameworks. His expertise includes SIEM governance, vulnerability management, incident response, cloud security, IAM, endpoint security and DLP. He works effectively with technical teams, audit stakeholders and C level leadership. He has strong knowledge of GDPR, TISAX, NIS2 and DORA and is experienced with Azure cloud security. He holds multiple relevant certifications including CISA, ISO 27001 Lead Auditor, CEH and GIAC GISF.

Led GRC programs across 170 accounts in regulated markets. Source: lead GRC programs across 170 accounts in 5 regulated markets Implemented ISO 27001 and 27701 frameworks improving compliance maturity by approximately 30 percent. Executed more than 200 control assessments annually ensuring audit readiness. Governed SIEM monitoring programs including log analysis threat detection and SOC escalation. Led vulnerability and threat management lifecycle including risk rating and remediation tracking. Developed security policies technical security concepts and IT risk analyses. Led incident response including root cause analysis escalation and lessons learned. Managed Azure cloud security governance including IAM controls and baseline reviews. Partnered with legal audit and executive stakeholders on GDPR PCI DSS SOX and NIS2. Improved incident response efficiency by approximately 25 percent through process redesign.