Andrea P. Email & Phone Number

I am driven by an intense passion for researching AI and ethics, data protection and information security and the law. This passion translates to who I am and to my career as well. This has led me securing my current a job as a “Data Privacy and Information Security Officer” which maximises my potential and gives me the right opportunities to enhance my skills and ex expertise within my sphere of things. I am naturally purpose driven and very intentional with regarding enhancing my knowledge, be the best in my job and working collaboratively with colleagues. This is one of the key reasons that gets me up early, grab a coffee, and open those much-loved pages (articles, books, etc) that allowed me to fulfil my lifelong dream.Having completed my dissertation in “Algorithmic Discrimination in Employment within a Data-Driven Society,” this ignited an interest in expanding my knowledge to understand the relationship between the technology and the law especially around how the law would ensure to be able to keep up with the advancement of technology. So I enrolled for a Master’s in “Law of Technology, Media and Telecommunications” - LLM at Queen Mary University of London. Fascinating modules! My current job provides me the opportunity to put into practice my learnings.In my role, I ensure compliance with the GDPR by ensuring that:- RoPA and asset inventory records are kept up-to-date- DPIAs, PIAs and LIAs are completed promptly and accurately- Assistance in the incident management process is providedTo protect the organisation’s reputation, data, and assets, I bridge the gap between operational security practices and strategic risk management acting as a second line of defense. I do so by ensuring:- Our security controls are properly designed, implemented and operate effectively- An information security culture is promoted- We act on audit findings and align security priorities with core business objectivesThanks to my in-depth research on AI ethics and governance, I supported the business by proposing a robust governance framework to ensure the responsible and ethical use of AI systems in line with the organisation’s values and core principles.The achievement I am most proud of in my new role was when I developed and implemented a GRC solution for third-party risk management, including incident management, data mapping, RoPA and asset inventory while doing BAU. This was a collaborative effort between myself and my manager. Further achievements:1. LLM graduation (2022-2025)2. Complete training and gain the CIPP/E certification (2024-2025)