Head Of Corporate It Risk Management & Compliance
ISO 27001 Certification Program• Initiated and maintained the ISO 27001 Certification Program, successfully rolling out the ISO 27001 Multi-Site Certification globally. Achieved zero non-compliances during external audits since 2018.Global IT Policy Management• Managed approximately 300 global IT policies, ensuring annual review and compliance.IT Variance Process• Led the IT variance process, ensuring alignment with corporate policies and standards.Information Security & Data Protection Assessments• Oversaw assessments for new and existing software and services to ensure compliance with information security and data protection standards.Flex Information Security Guidelines for Suppliers• Authored comprehensive information security guidelines for suppliers to align with internal and external compliance requirements.Customer Inquiries & Audits• Addressed customer inquiries (including questionnaires and audits) related to NIST Cybersecurity Framework, ISO 27001, ISO 13485, TISAX, PIPL, LGPD, CCPA, and other standards.Contract Reviews & Negotiations• Contributed to contract reviews and negotiations concerning information security and data protection.Lost/Stolen Devices Process• Managed the process for addressing lost or stolen devices, ensuring timely response and mitigation of risks.Information Security Risk Quantification Model• Developed a pilot model to quantify information security risks using probability analysis, providing a structured approach to risk management.