DPO for MEA region

- Primary lead for Onetrust Privacy management solution rollout from scratch including; initial configurations, SSO, branding, user and access management, end-user and administrator trainings, reporting and dashboard configuration.- Data mapping of 700 processing activities for 8 functions/ 70 teams - business unitsPrivado Source code PII data discovery and assessment of 1000 gitlab repositories / 3 development teams and creation of RoPa records. Provided prioritization based on business criticality, security maturity and threat score. Enhanced API visibility and groundwork for threat hunting and analysis.Implementation of 7 templates with Onetrust Assessment Automation; workflow design, routing rules, automation ruleset with 50 rules for creating risks and tasks. Performed privacy impact assessment for the 700 discovered processes.- Onetrust risk management module implementation; risk workflow design for risk lifecycle, created risk templates for 4 group companies and performed yearly risk management with 15 teams.- Onetrust incident management module implementation; migrated past incidents to Onetrust for organizational memory, created and published incident reporting webform, incident reporting channel and incident workflow, incident assessment and prioritization criteria.- Cookie Consent Management: Coordinated with the growth function to deploy the content security policy for secure processing of the cookies. Reduced the number of cookies deployed to e-commerce platform visitors devices from 180 to to 80s. Worked with the engineering and business teams to identify what purposes the cookies are deployed for and categorized the cookies. Deployed the cookie banner with the above mentioned categories and provided the platform visitors with visibility and the right to opt out of processing of their personal data for marketing purposes.-ISO 27001 implementation for Trendyol logistics - TEX.

- Privileged Access Management Assessment : Worked with client operating in resources industry to assess the first phase of their PAM implementation and provide them with the remediation steps and roadmap for the next phases.- Two Factor Authentication Implementation: Worked with client working in financial services to implement risk based two-factor authentication orchestration, have taken part in analysis, design and testing of the solution.

- Off-site support for telecommunications client cyber security transformation project - Identity & Access Management as-is state analysis, gap assessment & transformation roadmap, banking client- DLP Strategy & Enhancement, banking client- IDM Strategy & Design, banking client

10+ projects with clients operating in insurance, retail and consumer goods industries;- Privacy Compliance: Local Data Protection Law & GDPR - Data mapping- Privacy gap assessments & roadmaps- ISO 27001 Implementation- Data Classification - DLP Implementation