Lucas (Msc) Garzarolli-Business Consultant

Data Protection (Gdpr, Ccpa)

Iso 27001

Information Security

Risk And Project Management

Compliance Management

Team Lead

Business Process Optimization

Negotiations

Microsoft Office

G Suite

Implementation And Optimization Of Information Security Management Systems (Isms): Leading And Supporting Iso 27001 Initial And Re-certifications. Projects Carried Out Included Defining Clear Security Strategies And Setting Measurable Goals, As Well As Implementing And Refining Documentation, Processes, And Controls In Risk Management, Business Continuity Management, Change Management, Coordinating Penetration Tests, Asset Management, Business Partner Vetting, And Internal Audit.

Compliance And Data Protection Consulting: Structuring And Formalizing Compliance Management, Creating And Improving Documentation, Policies, And Processes, Conducting Gap Analyses, And Implementing Measures To Ensure Compliance With Eu Gdpr, Other European Laws, And Some International Regulations In Data Protection And Information Security.

Workshops And Training: Security Awareness (Creating And Delivering Security Awareness Programs For Employee Onboarding, Advanced Modules For Ongoing Training And Refreshers, Supplementary Materials, And Regular Communications) As Well As Workshops And Training On Data Protection And The Eu Gdpr To Raise Awareness Of General Data Protection Requirements And To Implement And Communicate Policies.

Audits And Assessments: Conducting Internal And External Audits, Including Comprehensive Risk Assessments, Gdpr Gap Analyses, And It Audits As Part Of The Annual Financial Statement Review. Planning And Documenting Necessary Measures, Carrying Out Controls, Training Employees, And Presenting Results In Management Reports.

Contract Negotiations And Agreements: Drafting And Tailoring Ndas, Data Processing Agreements Under Eu Gdpr, And Information Security Agreements, And Negotiating Them In The International B2b Space With Smes And Fortune 500 Companies.

Project Management: Coordinating Complex Projects With Various Internal And External Stakeholders, Including Cross-functional Collaboration In Alignment With Management.

Ciso And Data Protection Officer: Leading Security And Data Protection Initiatives As An Experienced Security Officer And Certified Data Protection Officer; Additional Qualifications Such As Isaca Crisc Or Mediation To Handle Technical And Organizational Challenges.