Security Consulting Consultant
CurrentConducted various cybersecurity assessments, defining a cyber governance model, assessing maturity, identifying gaps, proposing cybersecurity improvements, developing/updating policies and procedures, defining a cybersecurity roles and responsibilities matrix and a cybersecurity roadmap.Conducted privacy maturity assessments, providing recommendations for compliance with applicable legislation and best practices. Defined a proposal of the privacy governance structure and operational model, defining activities, roles, and responsibilities (RACI matrix), reporting line and team size. Development of artifacts for the privacy program, such as policies, SOP, process flows, framework for third- party due diligence, record of personal data processing activities (RoP), data protection impact assessment (DPIA), legitimate interest (LIA), Data Subject Rights (DSR), privacy by design and incident response.Worked as a PMO, managing the progress of activities proposed in the privacy roadmap for different company areas, tracking milestones and deliverables, identified and reported risks for activities delivery.
