Evelin Biro Email & Phone Number

Alpharetta, Ga, Us

Cybersecurity advisor for organizations looking to optimize their risk management strategies and entrepreneurs who are turning their innovative ideas into practical solutions.

Evaluate startups' viability and potential to facilitate informed investment decisions. Guide and support our portfolio companies in realizing their full potential by offering not just capital, but also strategic advice and expertise.

[After reaching $15 billion in assets, Alliant faced heightened regulatory scrutiny and oversight from a new regulator, NCUA ONES.] Evaluated and addressed outstanding regulatory findings and created supportive programs and processes; all confirmed with regulators. Assessed the organization's cybersecurity posture and readiness for new regulatory requirements, transition to fully digital banking, and enterprise risk appetite. Presented my findings and recommended a risk-based maturation process to the CEO, executive leadership, and the Board of Directors.

- Led the establishment and implementation of the IT/security risk management program for a large retail company. Built a risk framework, starting from appetite statements and policy to control framework and quantification process. Ensured alignment between IT Risk Management (ITRM) and Enterprise Risk Management (ERM) programs. Conducted an organization-wide risk assessment using Delphi and FAIR approaches. - Assessed the cybersecurity risk management program and provided gap analysis for one of the world's largest independent claims management providers and for a Fortune 150 utility company. Presented findings, a maturation path, and recommendations to the executive leadership.

[GET-Wabtec merger required GE to spin-off GE Transportation prior to a merger with Wabtec.] Formed and managed IT and Security governance, risk, and compliance programs. Strengthened IT sourcing, PMO, VMO, software governance, and asset management. Transitioned over 700 applications, transferred 70,000 licenses from GE to GET, and managed third-party vendor lifecycle, including performance, alignment, and compliance.

After being a long-time client of Gartner and successfully implementing their risk management methodologies, I was invited to serve as an advisor. I improved their security risk management consulting offerings and delivery. Additionally, I worked with end clients in an advisory and consulting capacity. Examples: (1) Evaluated bank’s cyber, risk management, compliance, and audit readiness for Dodd-Frank requirements. Identified weaknesses and presented path to gap closure and desired maturation level to banks’ CEO and Board. (2) Evaluated data privacy readiness of a Fortune 500 utility company against organizational risk appetite, public expectations, and applicable laws/regulations. Identified and classified sensitive data; provided risk levels and control requirements.

Chicago, Il, Us

Developed cybersecurity and risk management teams and capabilities to promote consumer trust, brand reputation, and operational agility. Built strong relationships with business executive leadership, strategic partners, and regulators. Shifted the organization's mindset towards cyber risk understanding and management. Elevated security to a strategic discipline, achieving a balance between security and business needs. Became a trusted advisor to Board members and business teams. Reported to the Supervisory Committee of the Board of Directors and the Chief Risk Officer (CRO).- Orchestrated a vision and roadmap, introducing new capabilities and growing the team by 60% to meet regulatory requirements and better align with ERM, audit, compliance, business, and technology functions.- Led a culture shift to a security-by-design and risk-based approach, gaining engagement and acceptance from business units and the enterprise risk committee.- Guided and supported key enterprise programs, including cloud transition, data center relocations, landing channel implementation, and product development.- Initiated a structured governance program and security policy framework, enabling transparency in cybersecurity requirements and reporting, in line with industry and regulatory expectations.- Established a mutually respectful relationship with regulators. Our Risk Management program was recognized as a credit union industry best practice.- Introduced and optimized security platforms and practices, including SIEM, IAM, PAM, GRC/TPRM, threat modeling, and shift-left security and compliance.

Charlotte, Nc, Us

-Served as a strategic advisor, connecting security, business, and external leaders. Supported technical modernization and digital transformation. Enabled successful outsourcing through organizational and cultural transformation. Negotiated requirements and implemented changes across the organization.-Reduced risk and financial drain. In collaboration with HR, sourcing, legal, and management functions, established a strong security program focused on human resourcing risk and lifecycle controls.

Boston, Ma, Us

Boston, Ma, Us

- Enabled regulatory compliance of the first Fortune 15 non-bank SIFI (Systemically Important Financial Institution), GE Capital. Pioneered global IT/security risk management program across 8 major business units across 45 countries. Established risk management framework, processes, requirements, teams, and GRC platform to support regulatory requirements of nonbank SIFI per Dodd-Frank Act. - Became risk management evangelist, enabling organizational understanding and acceptance of risk management processes and value. Collaborated with all levels of organization and across functions to ensure constant program improvement and appropriate business and risk alignment. No regulatory findings during my tenure.

Boston, Ma, Us

- Reduced regulatory exposure. Restructured regulatory, legal, and voluntary compliance and reporting; eliminated 20% of work effort. Worked with finance teams and auditors to reduce the scope of SOX applications and key controls by 40%. Constructed robust controls framework that normalized regulatory and voluntary compliance requirements by 30%.-Advanced data protection and privacy processes compliant with GE’s Binding Corporate Rules/EU Data Protection Directive (EU Directive 2002/58/EC), and Privacy Shield. Advised businesses on policy requirements and controls implementation.

Boston, Ma, Us

2004 - 2006 GE COMMERCIAL FINANCE - Program Development and Six Sigma Black Belt - Danbury, CT2002 - 2004 GE EQUIPMENT MANAGEMENT - IT Vendor Management and Six Sigma Black Belt - Stamford, CT2000 - 2002 GE ENERGY (Nuclear) - Information Management Leadership Program (IMLP) - Atlanta, GA, Wilmington, NC, Kurihama, Japan, Fairfield, CT, Schenectady, NY1999 - 2000 GE INDUSTRIAL - Co-Op HVAC developer- Fort Wayne, IN

Master Of Business Administration - Mba, International Business, Summa Cum Laude

Bachelor Of Science - Bs, Computer Science, Magna Cum Laude

Cybersecurity Leadership Program