Senior GRC and Information Security Manager

Experienced Senior GRC and Information Security Manager with 16 years of experience in delivering enterprise security, risk, and compliance programs in globally regulated markets. Specialized in leading GRC programs, implementing ISO 27001/27701 control frameworks, and managing SIEM-based monitoring programs. Possesses practical expertise in incident response, cloud security, and third-party risk management, and is adept at collaborating with C-level stakeholders.

Leading GRC programs in globally regulated markets, including the implementation of ISO 27001/27701 control frameworks. Managing SIEM-based monitoring programs and vulnerability lifecycle management. Leading ISMS implementation from policy development to audit completion. Developing security concepts and policies, and supporting ISO 27001 and TISAX compliance. Coordinating with external service providers and executing incident response processes. Practical experience in Incident Response, Endpoint Security, DLP, Cloud Security, and Third-Party Risk Management.