09/30/2025 updated
CW
100 % available
Operational Risk Mgt Consultant focused on Governance and Information Security | ISO 27001, CIA...
Mersch, Luxembourg
Luxembourg
Business school at HZ (NL) with Erasmus in FranceBusiness ContinuityComputer SecurityDue DiligenceGovernanceGovernance Risk Management and ComplianceInformation Security ManagementKey Risk IndicatorOperational AuditingRegulatory RequirementsRisk AnalysisRisk MeasureStandards-CompliantCarry Out AssessmentsInformation Security Management SystemRisk Management
Information Security Management
Comprehensive information security assessments to identify and mitigate potential threats and weaknesses. Implementation of ISMS 27002 framework and third-party information security clauses.
Risk Management
Development and implementation of risk frameworks across operational, IT, and climate domains. Monitoring of Key Risk Indicators (KRIs) and management of third-party risks. Multiple risk assessments.
Compliance & Governance
IImplementation of regulatory requirements (including participation in DORA-NIS2). Development of policies and procedures ensuring business continuity and operational audit standards.
Climate Risk Facilitation
Climate risk awareness sessions and workshops for organizations. Fostering understanding as a crucial step towards implementing necessary changes.
Operational Audit
Development of policies, creation of annual plans, execution of operational audits and follow-up on recommendations.
GRC Tool Implementation
Development and deployment of Governance, Risk, and Compliance tools for risk monitoring and management.
Third-Party Risk Management
Implementation of due diligence methodologies and strengthening of third-party risk controls.
Comprehensive information security assessments to identify and mitigate potential threats and weaknesses. Implementation of ISMS 27002 framework and third-party information security clauses.
Risk Management
Development and implementation of risk frameworks across operational, IT, and climate domains. Monitoring of Key Risk Indicators (KRIs) and management of third-party risks. Multiple risk assessments.
Compliance & Governance
IImplementation of regulatory requirements (including participation in DORA-NIS2). Development of policies and procedures ensuring business continuity and operational audit standards.
Climate Risk Facilitation
Climate risk awareness sessions and workshops for organizations. Fostering understanding as a crucial step towards implementing necessary changes.
Operational Audit
Development of policies, creation of annual plans, execution of operational audits and follow-up on recommendations.
GRC Tool Implementation
Development and deployment of Governance, Risk, and Compliance tools for risk monitoring and management.
Third-Party Risk Management
Implementation of due diligence methodologies and strengthening of third-party risk controls.
Experience
Professional experience10+ years
Freelancer since2017
Languages
GermanGoodEnglishNative speakerFrenchNative speakerDutchNative speaker
Project history
Conducting climate awareness sessions and workshops for public and private organizations
Conducted information security assessments, implemented ISMS 27002 framework, developed GRC-tool, established KRIs, implemented third party security clauses, contributed to DORA-NIS2 regulations implementation
Established IT-risk framework, managed IT-related risks, contributed to GRC-tool implementation for risk monitoring (RSA Archer)