Julie O. Email & Phone Number

- Develop and implement compliance policies and procedures: Lead the creation, review, and revision of corporate policies, ensuring consistency and adherence to relevant laws, guidelines, and industry standards.- Monitor regulatory changes: Stay informed about evolving government or industry regulations, and strategically adapt policies and procedures as needed.- Identify and manage compliance risks: Demonstrate a proactive approach to risk management by assessing existing and potential risks, developing robust mitigation strategies, and coordinating with other departments to minimize potential exposure.- Communicate policy and regulations: Lead and engage employees and stakeholders through effective communication of compliance requirements, promoting understanding and adherence.Training and development: Manage and organize regular training sessions and workshops to empower employees with knowledge about compliance measures and the ethical standards of the organization.- Conduct audits and report findings: Perform comprehensive audits and report on compliance with policies, procedures, and the regulatory environment, ensuring that issues are addressed and corrective actions are followed up accordingly.- Collaborate with other departments: Foster strong partnerships with departments such as legal, finance, IT, and human resources to ensure the consistent application of compliance standards throughout the organization.- Report to management: Provide insightful updates to executive leadership on program effectiveness, risk assessment, audit findings, and regulatory changes, highlighting opportunities for improvement and new strategic options.

United States

Responsible for the Security Compliance stream across the company. My experience on this job includes:- Building a flexible integrated security management system under the requirements of AICPA SOC2 (SSAE 18), ISO27001/17/18/701, and CSA STAR Level 2, which is continuously improving for multiple years- Conducting vendor risk reviews, including cloud service security reviews- Performing internal company-wide audits and assessments- Working closely with Legal departments on data protection guidelines, such as GDPR, CCPA, and ISO27701- Providing support to information security champions in the operations teams

Boston

Some of my key accomplishments in this role include:- Successfully launching an information security risk management strategy, process, and program that has been continuously improving over the years.- Collaborating closely with the legal team to ensure that controls are adequate to meet legal, regulatory, policy, standards, and security requirements, such as ISO27001, PCI, and SOX.- Prioritizing technical process requirements for data privacy regulations compliance, such as HIPAA, GDPR, and PDPA, and successfully implementing them across the organization.

London, United Kingdom

JV with Novartis Consumer HealthRisk and compliance consultancy and guidance to IT business partners and IT project managers within the consumer area (Central and Eastern Europe, Middle East, Northern Africa, Australia).Some of my key accomplishments in this role include:- Risk management for IT, mobile and web application projects for Consumer Health- Support Application security and vulnerability management risk category globally- GRC support for IT projects including low-level detailed application audits- Development of compliance guidelines to application security processes- Subject expert for Russia PII regulations for all GSK companies in the market

Specialised on data privacy projects (152 Federal Law), comprehensive IT audits and ISMS implementation (ISO/IEC 27001:2013)

Specialist, Comprehensive Information Security Of It Systems

Магистр, Физическая Культура Для Лиц С Отклонениями В Состоянии Здоровья (Адаптивная Физическая Культура)