Eda Almali

Background

About Eda Almali

Ich arbeite an der Schnittstelle zwischen Governance, Risiko und Technologie. As a Senior IT Governance Manager specializing in IT Compliance, Risk Management and Data Protection, I oversee key governance and control activities within the IT organization. I manage major cloud service providers, act as a decentralized contact for outsourcing management, and serve as the Data Protection Coordinator and main contact for data protection and compliance matters across the IT divisions. Previously, I worked as an IT Auditor, leading IT audits focused on service provider reviews, IT system audits, and IT organization assessments. I also acted as the primary contact for AI regulatory topics, developing audit plans for AI governance, high-risk AI systems and models with systemic risk potential in alignment with the evolving EU AI Act. I am dedicated to advancing a resilient and future-oriented IT governance framework that integrates regulatory compliance (GDPR / DSGVO, DORA, AI Act, MaRisk) with cloud governance, information security and AI risk management – enabling organizations to transform compliance into trusted, transparent and innovation-driven digital operations.