Radu M.

Security & Compliance Manager, Security Governance Services @Amadeus

Erding, DE

Lead SGS on services related to cloud and applications security, including security governance (security policies and procedures), security strategy (security planning), risk (risk assessments and management), cloud data protection (classification, encryption), cloud-based identity and access management, and technology/provider-specific cloud architecture (AWS, Azure, Google)Conduct cloud security strategy, readiness and discovery assessments; establish adequate security risk management framework for cloud solutions, compliance requirements and security operations.Understand business drivers and security enablement opportunities, translate technical cloud security requirements into business terms for executive stakeholders.• Collaborated with CISO function to embed security into standard operating procedures such as change management, privileged access, systems life cycle management• Performed risk assessment of cloud applications and worked closely with project teams on building/configuring security in Collaboration tools, CRM tools, Finance & HR systems. • Charged with analyzing technology, operational processes and internal controls to formulate cost-effective measures to improve control effectiveness and efficiency.• Led the design and operation of compliance monitoring and improvement activities to ensure appropriate treatment of risk and compliance of internal security policies and external regulations (PCI-DSS).• Coordinated regulatory compliance process with local laws and regulations ((PCI-DSS, ISO27001, SSAE-16 audits), oversaw risk remediation activities