Özlem is mainly qualified in KVKK&GDPR compliance & technology transformation, process consulting, IT governance, data fraud analytics, data mining, social engineering tests and audit projects initiated to establish and enhance the control framework of the companies. Moreover she has qualified in defining key risks and corresponding controls within the business and information technology processes, mapping these processes and controls to the financial risks regarding the COSO framework, and assessing financial impacts of the internal control weaknesses. She performed IT general controls and application controls reviews for external audit support engagements for Financial Services (FS) and Technology, Information, Communications and Entertainment (TICE) clients in PwC. Additionally, she has worked on various system transformation projects and risk assurance projects (especially audit and system transformation project experiences in Banking and Capital Markets) during her career. She gives consultancy the clients on a variety of control issues, linking technical security matters relating to the IT infrastructure and the related management processes (especially banking process) back to their business objectives. Furthermore she gave ISAE3402, ISO27001, ISO 22301, COBIT, GDPR, KVKK and PCI DSS consultancy and technology transformation. She has internal audit experiences on various sectors regarding process modelling and documentation, quality assessment, control and risk assessment.She performed data analytics using with relevant analysis tools and main data by reference to various fraud scenarios (especially in SAP) in retail, e-commerce and Banking sectors. She is knowledgeable on implementation and management of SAP GRC AC & ERM modules.She is certified by ISO and ISACA as an ISO 27001 Lead Auditor & CISA & CDPSE. Additionally she is a member of TIDE and ISACA Istanbul Chapter and she is interested to add value her profession to participate academical conferences. Specialties:KVKK/GDPR consultancy, IS / IT Audit, Information Security, Business Resilience, IT Strategy, CISA, ISO 27001, ISO 22301, ITIL, COBIT, ISAE3402, SOC2, IT Risk Management, 3rd Party Risk Management, IT Due Diligence, Cybersecurity Resilience, Cyber Crisis Management.