Simona Serban

Background

About Simona Serban

Accomplished Information Security and Regulatory Compliance Specialist with over 10 years of experience, leveraging a strong foundation in ISO 27001, GDPR, and the Certificate of Cloud Security Knowledge V4 (CCSK v4). I have a proven track record of successfully managing SaaS Compliance and leading control modernization initiatives at major tech enterprises (e.g, Oracle and Ericsson), specializing in securing critical cloud environments. I aim to apply my expertise to drive robust GRC (Governance, Risk, and Compliance) strategies that align security controls with ambitious business objectives. My specialization lies in architecting scalable compliance frameworks and implementing Control Automation solutions, utilizing cloud-native and AI tools, to proactively mitigate risk and improve operational efficiency. I am adept at orchestrating the end-to-end audit lifecycle, from planning and evidence generation to managing the complex Audit Remediation process. I combine technical auditing skills with strategic Risk Assessment capabilities to deliver actionable, data-driven insights to leadership and cross-functional stakeholders. I am dedicated to advancing organizational security posture and am seeking a challenging GRC leadership role where I can apply my deep knowledge in securing modern, high-growth cloud platforms. Key Skills: Information Security Governance | Cloud Security (CCSK)| ISO 27001 | GDPR | Risk Assessment | Control Automation | Audit Remediation | SaaS Compliance