Lucas (Msc) Garzarolli

Data Protection (Gdpr, Ccpa)

Iso 27001

Information Security

Risk And Project Management

Compliance Management

Team Lead

Business Process Optimization

Negotiation

Microsoft Office

G Suite

Implementation And Optimization Of Information Security Management Systems (Isms): Leading And Supporting Initial Iso 27001 Certifications And Re-certifications. Projects Included Defining Clear Security Strategies And Setting Measurable Goals, As Well As Implementing And Improving Documentation, Processes, And Controls In Risk Management, Business Continuity Management, Change Management, Coordinating Penetration Tests, Asset Management, Business Partner Vetting, And Internal Audits.

Compliance And Data Protection Consulting: Structuring And Formalizing Compliance Management, Creating And Improving Documentation, Policies, And Processes, Conducting Gap Analyses, And Implementing Measures To Ensure Compliance With The Eu Gdpr, Other European Laws, And Some International Regulations In Data Protection And Information Security.

Workshops And Training: Security Awareness (Developing And Delivering Security Awareness Programs For Employee Onboarding, Advanced Modules For Further Training And Refreshers, Additional Materials, And Regular Communication Activities) As Well As Workshops And Training On Data Protection And The Eu Gdpr To Raise Awareness Of General Data Protection Requirements And To Implement And Communicate Policies.

Audits And Assessments: Conducting Internal And External Audits, Including Comprehensive Risk Assessments, Gdpr Gap Analyses, And It Audits As Part Of Year-end Reviews. Planning And Documenting Required Actions, Performing Checks, Training Employees, And Presenting Results In Management Reports.

Contractual Agreements And Negotiations: Drafting And Adjusting Ndas, Data Processing Agreements Under The Eu Gdpr, And Information Security Agreements, And Negotiating Them In The International B2b Space With Smes And Fortune 500 Companies.

Project Management: Coordinating Complex Projects With Various Internal And External Stakeholders, Including Cross-functional Collaboration In Alignment With Management.

Ciso And Data Protection Officer: Leading Security And Data Protection Initiatives As An Experienced Security Officer And Certified Data Protection Officer; Additional Qualifications Such As Isaca Crisc Or Mediation To Address Technical And Organizational Challenges.