Description

Freelance Information Security & Privacy Risk Consultant with over a decade of

global experience across the US, Europe, and Africa. Proven success delivering

regulatory compliance, IT audit, cybersecurity and privacy programs as well as

strategic and enterprise risk management services across Fortune 500 firms,

startups, and scale-ups. Known for translating complex risk into actionable

business strategies, building inclusive teams, and enabling secure innovation.

CISA & CISM Certified | MBA in Strategic Leadership & Business Analytics
Deep familiarity with frameworks including ISO 27001, NIST, HIPAA, SOX, PCI-DSS, GDPR/CCPA, DORA, ISO 42001
Expertise in designing and executing enterprise-wide risk and compliance
programs.
Available for: Risk Advisory Projects, Information Security/Privacy Strategy Program Builds, Audit Readiness & Controls Assessments

Industry field of expertise

Languages

English
Native or bilingual

Workplace preferences

Can work on-site

Amsterdam (up to 50km)

ALGOLIA
INFORMATION SECURITY MANAGER- TECHNOLOGY COMPLIANCE
August 2022 - Today (3 years and 10 months)
Built and scaled the information security and privacy program leading to better processes, awareness and technical controls
Redesigned the ISMS control framework and corresponding processes to align with ISO 27001:2022, ISO 27017:2015, SOC 2 and BSI C5
Implemented GRC tooling across the environment for real-time risk and compliance monitoring. Enabled early identification of issues resulting in 80% decrease in external audit findings
Serve as an advisor to the Head of Information Security, Chief Technology Officer and Chief General Counsel on technology compliance pain points.
Provide recommendations and lead the change efforts
Created and facilitated organizational trainings to increase security and privacy awareness
Audit ISO 27001 Risk analysis Cybersecurity IT-Security
BOOKING.COM, KAYAK, PRICELINE, OPENTABLE, AGODA
IT AUDIT MANAGER
May 2018 - July 2022 (4 years and 2 months)
Directed IT and Operational audit teams across United States and Netherlands. Conducted integrated risk assessments for strategic projects, mergers and new acquisitions Led cybersecurity audits, regulatory reviews and SOX controls testing across $20B in revenue operations Advised cross-functional tech and product leads on control design and
implementation
NESTLE
IT AUDIT LEAD
March 2016 - April 2018 (2 years and 1 month)
North America
Delivered 30+ audits across North America, improving audit outcomes and
reducing compliance risks Fostered a collaborative team environment through continuous
engagement and feedback cycles across a global team (10 direct
reports).