Michelle S. Email & Phone Number

Amsterdam, North Holland, Nl

My job as a Head of Risk & ITOps consists of:- Drawing up, maintaining, implementing and evaluating the policies with regard to information security, privacy, business continuity and AI.- Preparing the review of policies related to information security, privacy, business continuity and AI.- Providing awareness on information security, privacy, business continuity and AI within the organisation.- Registering and following up incidents with regard to information security, business continuity and privacy.- Prepare and execute business continuity exercises.- Coordinating internal and external audits.- Monitoring the context. Alertness on any possible threats for ThreatFabric and take proactive action.- Supervising the IT System Administrators. Make sure the environment ThreatFabric employees work in is safe all the time.- Performing checks and reporting the outcomes (and suggestions for improvement) to the Executive Team.- Continuously scoring risks in daily operations and implementing measures to mitigate the risks.- Reviewing contracts and providing legal advice especially relating to information security, business continuity (SLA’s) and privacy (DPA’s).- Executing vendor assessments on a continuous basis. - Cooperate with HR in order to make sure employee risks are known and measures are taken.

Amsterdam, North Holland, Nl

My job as a CISO consisted of:- Security operations: Real-time analysis of immediate threats, and triage when something goes wrong.- Cyberrisk and cyber intelligence: Keeping abreast of developing security threats and helping the board understand potential security problems that might arise from for example acquisition.- Data loss and fraud prevention: Making sure data will not be misused or stolen.- Security architecture: Making sure IT and network infrastructure is designed with best security practices in mind.- Organizing awareness sessions and making sure a training plan is in place for different teams across the organisation.- Identity and access management: Ensuring that only authorized people have access to restricted data and systems.- Programme management: Keeping ahead of security needs by implementing programs or projects that mitigate risks.- Investigations and forensics: Determining what went wrong in a breach, dealing with those responsible if they are internal, and planning to avoid repeats of the same crisis.- Governance: Making sure all of the above initiatives run smoothly and get the funding they need — and that corporate leadership understands their importance.- Implementing and executing information security and privacy management systems according to the standards ISO 27001 and ISO 27701.

Alkmaar, Noord-Holland, Nl

My job as an Information Security Consultant consisted of:- Revising and analyzing IT operations and systems, hardware configurations, physical security and operating procedures across organizations.- Consulting and complying with set controls, standards (e.g., ISO 27001, ISO 27701, ISO 9001, ISO 22301), policies and procedures while carrying out IT activities.- Searching technology and reduce risks in every information security segment.- Suggesting measures to improve IT related procedures, operations, processes and systems throughout organization.- Implementing penetration testing along with ethical hacking.- Suggesting and execute IT technologies, strategies and policies to guard customer’s information assets.- Implementing security risk analysis for current and new systems to find system weaknesses or disclosures.- Recommending solutions for explaining risks and reducing exposure areas.- Preparing security programme plans and execute IT controls, processes, audit tools, interfaces and utilities for authentication.- Performing as chief for internal and external audits and security aspects.- Supporting and provide consultancy for audit compliance actions.- Implementing periodic, on-demand vulnerability analyses.- Determining compliance through user accounts, application usage, system file and outside scans.- Performing independently in team implementing security and privacy engagements.- Reviewing client networks and applications.

My job as a CISO consisted of:- Security operations: Real-time analysis of immediate threats, and triage when something goes wrong.- Cyberrisk and cyber intelligence: Keeping abreast of developing security threats and helping the board understand potential security problems that might arise from acquisitions or other big business moves- Data loss and fraud prevention: Making sure data will not be misused or stolen.- Security architecture: Making sure IT and network infrastructure is designed with best security practices in mind.- Identity and access management: Ensuring that only authorized people have access to restricted data and systems.- Programme management: Keeping ahead of security needs by implementing programs or projects that mitigate risks — regular system patches, for instance.- Investigations and forensics: Determining what went wrong in a breach, dealing with those responsible if they're internal, and planning to avoid repeats of the same crisis.- Governance: Making sure all of the above initiatives run smoothly and get the funding they need — and that corporate leadership understands their importance.- Implementing and executing information security and privacy management systems according to the standards ISO 27001, NEN 7510 and ISO 27701.- Implementing and executing quality management systems according to the ISO 9001 standard and CE-marking.- Implementing and executing business continuity management systems according to the ISO 22301 standard.

Nieuwe-Niedorp, North Holland, Nl

My job as a Quality Manager consisted of:- Designing, implementing and monitoring quality procedures and specifications (according to the NEN-EN 15224 standard).- Researching and reviewing customer and chain partner feedback.- Setting standards for quality as well as health and safety.- Looking at ways to increase efficiency.- Setting up and maintaining controls and documentation procedures.- Monitoring performance by gathering relevant data and producing statistical reports.- Making suggestions for changes and improvements and how to implement them.- Implementing health and safety policies into the overall quality management process.- Undertaking and reporting internal quality audits.- Writing annual and other policy reports.- Managing staff to ensure quality frameworks are implemented.- Provide updates and report to the owners around quality issues.

Alkmaar, North Holland, Nl

My job as a Business Developer consisted of:- Writing long term ICT strategies in close collaboration with ICT colleagues.- Lead in the development/adoption and enforcement of Information Security policies, procedures and standards. Conduct and complete an annual review of required Information Security regulations and reports.- Prepare, execute, manage, monitor and evaluate projects with regard to Information Security - including certification processes such as ISO 27001/27002 and NEN 7510.- Responsible for new and existing customers (account management).- Help setting a roadmap and prioritize tickets.- Responsible for implementing the product among users (writing manuals, training users).- Responsible for marketing, sales and communication.- Responsible for applying for public fundings.- Run training and awareness programmes for employees.

Alkmaar, North Holland, Nl

My job as a Project Manager / Policy Advisor consisted of:- Implementing a uniform "Chain Information System" that connnects all seperate information systems of GPs and mental healthcare specialists (psychologists and psychiatrists) contracted to Vicino; - Implementing new policies with regard to complaints and incidents due to new legislation (Wkkgz);- Implementing a quality management system that complies with ISO 9001:2015 for healthcare;- Creating a digital platform where Vicino employees and contracted GPs and mental healthcare specialists can interact with each other; - Implementing an information security management system that complies with ISO 27001/27002;- Analyzing data and subsequently creating and sending out management reports;- Writing Standard Operating Procedures and creating other kinds of training materials, such as FAQ's and instruction videos;- Writing annual company reports, communication policies and plans; - Training mental healthcare specialists on how to use the Chain Information System;- Creating one uniform contract that can be applied to multiple companies that are linked to Vicino;- Analysing, comparing and implementing standards and criteria set by the health insurers;- Other temporary projects.

Alkmaar, North Holland, Nl

My job as a secretary of the works council consisted of:- Devising and maintaining office systems, including data management and filing;- Organising and maintaining diaries and making appointments;- Dealing with incoming email, faxes and post, often corresponding on behalf of the chairman;- Carrying out background research and presenting findings;- Producing documents, briefing papers, reports and presentations;- Organising and attending meetings and ensuring the chairman is well prepared for meetings;- Writing minutes of both informal and formal meetings;- Writing an annual report in close cooperation with the chairman en the other members of the works council.

Alkmaar, North Holland, Nl

My job as a junior project manager / policy advisor consists of:- Managing the implementation of a uniform "Chain Information System" that will connect all seperate information systems of GPs and mental healthcare specialists contracted to Vicino;- Identifying and mapping the mental healthcare processes from patient to mental healthcare specialists;- Writing Standard Operating Procedures for the "Chain Information System" users;- Training mental healthcare specialists on how to use the "Chain Information System";- Other temporary projects.

Enschede, Overijssel, Nl

Key Achievements- Lead the Bonus 2014 project (net worth of 13 million euros) successfully;- Key member of the Sales Engine projects in order to make the business more efficient and reduce administration time of the Account Managers;- Developed and wrote all Standardised Operating Procedures in order to maintain and extend knowledge;- Created a customer survey in order to measure customer satisfaction and implement changes accordingly;- Initiated a monthly meeting “Lunch and Learn” for the finance department to discuss financial updates.Main Responsibilities- Lead and supported innovative projects (e.g. Introduction Extra Cold Beer, Introduction Kornuit Premium Pilsner, SAP migration, Bonus Process 2014);- Supported local, regional and national Grolsch and Open Market Account Managers;- Registered all closed deals in SAP and kept an eye on the progression of the assessment workflow;- All kinds of administrative tasks.

Trowbridge, Wiltshire, Gb

My job as an international market researcher consisted of:- Conducting an international market research into Dutch, Belgian, German and Finnish pharmacies and pharmaceutical wholesalers in order to create a new business policy with regard to the Dutch pharmacy channel;- Developing a business plan to implement the new business policy successfully and in order to make the pharmacy channel more profitable for Nutricia Advanced Medical Nutrition.

Together with two other international students I worked on an Internet Marketing Plan. We had to promote the Volvo Ocean Race (famous sail event) stopover in Galway, Ireland. We had to promote the event on online social network pages (Facebook, Bebo, MySpace etc). We were in close contact with the organisation, which gave us the assignment. The aim of the assignment was to get around 300,000 people to Galway for the stopover.

Baarn, Utrecht, Nl

• Carried out a market research in the City of London to investigate whether companies demanded preventative medical research for the higher management positions;• Developed new strategic and marketing strategies to improve business results;• All kinds of administrative tasks.

Master, International Business

Bachelor In Business (Honours) Degree, International Business

Bachelor, International Business And Languages