Andreea Grecu
GRC Engineer | ISO 27001 & Risk Management
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
Cybersecurity engineer specializing in GRC, and regulatory compliance. 5 years of experience in information security, across consulting and high-growth tech environments, including missions at Wavestone and Doctolib. Particular expertise in leading end-to-end certification programs (ISO 27001, ISO 27701, HDS, NIS2). Open to freelance missions in cybersecurity and compliance.
Expérience de travail
GRC Engineer
Doctolib
juin 2023 - Présent
3 ans 5 mois
92300 Levallois-Perret, France
Context: Leading information security certifications and regulatory compliance in a high-growth European HealthTech environment Responsibilities: - Led the information security certification program - Built and operationalized the risk management framework - Designed the cybersecurity awareness training program - Managed third-party assessments and security contracts
Cybersecurity Engineer
Wavestone
janv. 2022 - mai 2023
1 an 5 mois
Vétheuil, France
Context: Delivered information security consulting missions for enterprises across multiple industries Responsibilities: - Led ISO 27001 ISMS implementation - Conducted IT security audits and risk treatment plan definition - Supported GDPR compliance
Data Protection Analyst
CREDIT AGRICOLE PROTECTION SECURITE
avr. 2021 - oct. 2021
7 mois
Le Mans, France
Context: Supported the DPO in operationalizing GDPR compliance across the organization Responsibilities: - Updated the records of processing activities - Defined data retention policy - Managed data subject rights requests - Reviewed contractual clauses and data protection agreements
Formation
University of Strasbourg
M2, Digital Law
2020 - 2021
1 an 1 mois
University of Strasbourg
M1, International Business, Trade, and Tax Law
2019 - 2020
1 an 1 mois
Universitatea „Alexandru Ioan Cuza” din Iași
Bachelor's degree, Law
2014 - 2018
4 ans 1 mois