Maeva Kara

🔹 Delivered end-to-end cyber, IT and operational risk management aligned with ISO 27001, NIST, PCI DSS and GDPR 🔹 Led cyber risk assessments, BIAs and maturity assessments, driving risk treatment, remediation plans and business continuity 🔹 Implemented and managed an ISO 27001 ISMS: security policies, internal controls, documentation and audit readiness 🔹 Supported Identity and Access Management (IAM): Ping, MFA, RBAC, least privilege and access lifecycle 🔹 Coordinated vulnerability management and penetration testing remediation with IT and SOC teams; improved threat detection, incident response and digital forensics 🔹 Built executive risk dashboards and reporting with KPIs and KRIs for risk-based decision making 🔹 Delivered secure AI automation and system integration (AI agents, n8n, Claude, Qwen), managing AI governance and AI security risks such as data leakage, prompt injection and excessive agent permissions

🔹 Conducted cyber and IT risk assessments to identify control weaknesses and strengthen resilience. 🔹 Performed vulnerability scans and supported remediation strategies post-penetration testing engagements. 🔹 Led ISO 27001-compliant ISMS development and implementation tailored to each client’s risk profile. 🔹 Enhanced network and cloud security architecture with secure firewall rules and real-time threat monitoring. 🔹 Advised on GDPR, SOC 2, and NIST CSF compliance, including risk register development and impact assessments. 🔹 Coordinated digital forensics and incident response to bolster post-breach readiness. 🔹 Defined IAM and PAM protocols, including access policy tuning and permission lifecycle workflows. 🔹 Drafted security policies and business continuity playbooks that aligned with ISO 22301 and ISO 31000.

🔹 Supported multinational clients in implementing ERM systems aligned with ISO 31000, GDPR, and FINMA. 🔹 Conducted BIAs and risk mappings for pharma, banking, and public sector clients to guide BCM programs. 🔹 Designed integrated risk dashboards and registers using ServiceNow IRM, driving data transparency. 🔹 Led deployment of Third-Party Risk Management (TPRM) frameworks via ServiceNow VRM platform. 🔹 Reviewed and updated information security policies to meet ISO 27001 and ISO 22301 compliance standards. 🔹 Delivered cybersecurity risk assessments for critical infrastructure including Swiss airports and pharma firms. 🔹 Facilitated internal stakeholder training to embed accountability across risk and control functions. 🔹 Created KPI/KRI/KGI reports for C-level visibility into compliance posture and risk exposure.

🔹 Mapped enterprise risks based on ISO 31000, including IT risks, pandemic disruptions, and sector-specific regulations (GxP, FDA) 🔹 Conducted Business Impact Analyses (BIA) and initiated action plans to secure critical functions and reduce cyber and quality-related disruptions 🔹 Developed and implemented Business Continuity Plans (BCPs) aligned with ISO 22301 and GxP standards (GMP, GDP, GCP), tailored to pharma, biotech, and life sciences environments 🔹 Defined key risk indicators (KPI, KRI) and delivered executive reporting to support strategic compliance and resilience management 🔹 Coordinated external cybersecurity and quality audits (FDA, ISO, GxP), tracked non-conformities, and supported remediation 🔹 Monitored IT controls and remote work environments, ensuring compliance with FDA 21 CFR Part 11 during COVID-19 🔹 Produced risk dashboards for executive committees and regulatory inspections 🔹 Strengthened regulatory compliance by aligning internal controls with critical business processes, particularly for FDA- and GxP-regulated clients

🔹 Oversaw the handling and protection of sensitive vendor and client data, ensuring secure digital communication and storage 🔹 Coordinated with travel service vendors to align data exchange processes with confidentiality and integrity requirements 🔹 Monitored vendor performance through KPI dashboards, identifying risks and implementing corrective actions 🔹 Supported secure onboarding of new vendors to maintain service reliability across African markets 🔹 Assisted with project planning, timelines, and stakeholder reporting for risk-related initiatives