Executive snapshot
- Experience: Mehrjährige Erfahrung
- Seniority: Senior
- Work mode: Verhandelbar
- Availability: Nach Absprache
- Region: Berlin, Deutschland
- Focus: Financial Services, Technology, Software Development, Software
At a glance
Profile ID
DP-319190
Role
Information Security Manager, GRC Specialist, Cybersecurity Expert
Seniority
Senior
Experience
Mehrjährige Erfahrung
Work mode
Verhandelbar
Availability
Nach Absprache
Region
Berlin, Deutschland
Indicative rate
Nach Absprache
Short profile
Experienced IT Security Manager and GRC Specialist with comprehensive expertise in leading Governance, Risk, and Compliance programs. Specialized in Cybersecurity Assurance, ISO 27001 implementations, and Third-Party Risk Management within financial services and technology environments. Proficient in the design and operation of ISMS and the implementation of controls according to ISO 27001:2022, NIST CSF, PCI DSS, GDPR, DORA, and SOC 2. Demonstrated ability to collaborate with senior stakeholders and regulatory authorities.
Focus (domains)
Financial ServicesTechnologySoftware DevelopmentSoftwareSecurityTestingManagementLeadership
Core skills
Information SecurityGRCISMSCybersecurity AssuranceRisk ManagementComplianceAudit ManagementSecurity ArchitectureRegulatory ComplianceThird-Party Risk ManagementCyber ResilienceISO 27001NIST CSFPCI DSSGDPRDORASOC 2AI GovernanceJiraSecurityTestingCybersecurityHardwareSoftwareValidationManagementLeadershipCertified Information Systems Auditor (CISA)Certified in Cybersecurity (CC)Cybersecurity / SecurityConsulting / Stakeholder / Leadership
Tools & technologies
JiraSecurityTestingCybersecurityHardwareSoftwareValidation
Track record & project highlights
Leading Governance, Risk, and Compliance programs and Cybersecurity Assurance initiatives; Implementing and managing ISO 27001 programs and Third-Party Risk Management; Conducting security architecture reviews and Enterprise Risk Management in financial and technology environments; Designing and operating Information Security Management Systems (ISMS); Enhancing cyber resilience and managing audits; Implementing controls according to ISO 27001:2022, NIST CSF, PCI DSS, GDPR, DORA, and SOC 2; Developing and implementing AI governance frameworks.
