Andrea L.
Cloud Services Compliance Officer @Thales
Signup · Get unlimited contacts
WORK HISTORY
Cloud Services Compliance Officer @Thales
Ottawa, ON, CA
Provide in-depth requirement, control, and audit guidance to management to maintain and expand cybersecurity certifications / examinations for Thales CPL cloud service products within assigned domain- Drive critical activities in support of the certification external audit cycle, including validation of audit scope and budgets, coordination of schedules, reviewing and finalizing SOWs, documenting controls, maintaining ISMS documentation, interfacing with external auditors, gathering evidence, facilitating walkthroughs, resolving auditor questions / concerns and managing the finalization / distribution of audit reports-During my tenor, successfully supported CPL Cloud Services in achieving certification to the 2022 version of ISO/IEC 27001, achieving Cloud Security Alliance’s (CSA) STAR level 2 certification aligned to ISO 27001 and adding assurance against privacy and confidentiality trust criteria to existing SOC 2 Type 2 Auditor Report-Collaborate with internal stakeholders to identify risks, compliance gaps and mitigating actions to continually improve the Information Security Management System and security posture. Serve as a Subject Matter Expert for customer security questionnaires and certification inquiries-Independently initiated and led all phases of a project to procure a Governance, Risk & Compliance (GRC) tool. Identified the gap, developed business case and evaluation matrix, shortlisted and engaged vendors, and collaborated with procurement to onboard approved vendor (Hyperproof)-Currently leading the follow-on Hyperproof implementation project which includes aligning and amalgamating processes across 4 separate CPL compliance teams, consolidation of control stack, set up compliance framework requirements, risk registers and management reporting, and maintenance of evidence repository and external audit records.
EDUCATION
University of Toronto Scarborough
Honours Bachelor of Commerce, Specialist in Management and Economics
SKILLS
ABOUT ANDREA L.
An adaptable, resourceful, and collaborative professional with extensive internal and external audit, Cybersecurity governance, risk and compliance experience-Over 9 years of experience in Cloud Services and IT & Security, with a strong background in: auditing & assurance, process improvement, reporting, policy development, change management, governance, requirements analysis, and stakeholder engagement-Demonstrated expertise in external audit support, including negotiating with auditors, collecting evidence, providing control walkthroughs, and successfully passing IT certification external audits-Growth-oriented leader with a track record of managing multiple concurrent projects, developing team capabilities, and leading initiatives to drive operational excellence-Strong communication, liaising, and facilitation abilities (both working independently and as part of teams)- Proven ability to cultivate climate of trust and collaboration with colleagues, superiors, external stakeholders, and other professionals while working in fast-paced, deadline-driven environments- Technically proficient in Microsoft Office Suite, JIRA, Confluence, as well as in specialized software and applications, including Hyperproof, Protiviti GRC and AutoAudit- Supported Certification / External Audit Attestation to the following Cybersecurity Frameworks: ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, SOC 2 Type 2, CSA STAR Level 2 Certification aligned to ISO 27001, WebTrust, ETSI
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.