Greg Brandt
Information Security Officer Intern @Cs Visor
Signup · Get unlimited contacts
WORK HISTORY
Information Security Officer Intern @Cs Visor
Berlin, DE
Summary: I support the development and ongoing maintenance of an ISO/IEC 27001-aligned Information Security Management System (ISMS), integrating security operations with governance, risk, and compliance functions. My responsibilities include risk assessments, control documentation, audit preparation, vulnerability tracking, and aligning SIEM-driven incident response activities with defined control objectives and regulatory requirements, strengthening compliance readiness and risk visibility across the organization.Responsibilities & Operational Overight:• Contribute to the implementation and continuous improvement of an ISO/IEC 27001 ISMS, including development of security policies, Statements of Applicability (SoA), and Business Impact Analyses (BIA).• Maintain and update the risk register, conduct structured risk assessments using a risk matrix, and support remediation planning in alignment with enterprise risk management principles.• Perform gap analyses, control validation, and audit evidence documentation to support internal audits and certification readiness.• Integrate SOC operations (SIEM monitoring, EDR alert triage, log analysis, IOC validation) into governance workflows, ensuring incident response aligned with established control objectives.• Support vulnerability management, remediation tracking, access review processes, and security awareness initiatives, enhancing regulatory compliance and operational resilience.Key Skills: Information Security Governance, ISO/IEC 27001, ISMS, Risk Assessment & Risk Matrix Analysis, Risk Register Management, Internal Controls & Testing, Audit Readiness & Evidence Management, Gap Analysis, Vulnerability Management, Incident Response Governance, SIEM Monitoring, EDR Analysis, Regulatory Compliance (EU & US), Business Impact Analysis (BIA), Statement of Applicability (SoA), Identity & Access Management (IAM), GDPR, Security Policy Development, Third-Party Risk Awareness, Continuous Improvement
EDUCATION
ZeBuS e.V. Zentrum für Bildung und Sprachen, Berlin
BAMF General Integration Course, German
Boston University
Bachelor of Business Administration - BBA
Northeastern University
Master of Business Administration - MBA
SKILLS
ABOUT GREG BRANDT
I am a Cybersecurity Governance, Risk and Compliance (GRC) professional with 20+ years of experience in highly regulated financial services and healthcare environments, including global institutions subject to EU and US regulatory frameworks. My background spans internal controls, audit management, regulatory reporting, third-party risk, and policy governance, with a consistent focus on risk transparency, control effectiveness, and audit-ready operations. I am currently realigning into cybersecurity GRC and IT risk roles through hands-on training and security operations center (SOC) exposure in a structured immersion program. This transition allows me to bridge business risk, regulatory requirements, and technical security controls across many EU and US jurisdictional regulations. As I complete my cybersecurity training, I am seeking a full-time hybrid/remote cybersecurity GRC, IT Risk Analyst, or SOC-adjacent role in Berlin or the EU with an expected start date of September 2026. Professional Skills: Cyber Defense & Security Ops, End-to-End Audit Management, Third-Party Risk Management (TPRM), Disaster Recovery Planning (DRP), Business Continuity Planning (BCP), Phishing Analysis, Incident Response, Malware Analysis, Log Analysis, Endpoint Security (EDR), Security Information und Event Management (SIEM), Data Loss Prevention (DLP), Vulnerability Scan and Management, Use Case Analysis and Development, Cloud Security
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.