More than 10 years in security, privacy, and GRC
Experience across IBM Consulting roles covering risk assessments, privacy-by-design, secure-by-design reviews, audit readiness, and control evidence.
For recruiters and security leaders
Security, privacy, and GRC experience that connects governance with delivery.
More than 10 years across security risk, privacy-by-design, secure-by-design reviews, control assurance, incident governance, PKI, and HSM-related delivery in complex environments.
I translate governance expectations into proportionate controls, defensible evidence, clear ownership, and actions that technical teams can implement.
Recruiter quick view
A concise view of relevant roles, delivery depth, and the evidence behind the profile.
Target roles
- Security governance and GRC
- Privacy, compliance, and controls
- Cybersecurity risk and assurance
- Security advisory and program coordination
Relevant depth
- Secure-by-design and privacy-by-design reviews
- Risk assessments, audit readiness, and control evidence
- Incident governance and remediation follow-up
- PKI, certificate lifecycle, and HSM support
- Linux administration foundations; former LPIC-1/2
Delivery context
- More than 10 years across IBM Consulting roles
- Regulated banking and blockchain environments
- International stakeholder and assessment experience
- Founder-led and hands-on digital systems delivery
- Electrical and photovoltaic qualifications; ElectroVerde founder
Based in Bucharest, Romania. Native Romanian, fluent English, and a good command of Italian. Master’s degree in Economic IT and bachelor’s degree in Computer Science for Business Management.
My working style is direct and evidence-led: make the risk explicit, clarify ownership, and leave teams with decisions they can execute.
Evidence behind the profile
Selected experience and credentials across governance, controls, regulated delivery, and technical operations.
Incident governance and remediation
As a CSIRT-facing BISO delegate, I supported incident intake, action tracking, stakeholder alignment, closure criteria, and lessons learned.
PKI, certificate lifecycle, and HSM experience
Hands-on work with certificate lifecycles, key exchange, and Gemalto Cloud HSM support in a regulated banking and blockchain platform context.
Microsoft Certified: Security, Compliance, and Identity Fundamentals
SC-900 certification covering foundational Microsoft security, compliance, identity, access, and trust concepts.
Linux administration certification history
LPIC-1 Certified Linux Administrator and LPIC-2 Certified Linux Engineer through Universitatea POLITEHNICA din București, issued June 2018 and expired June 2023. Listed as historical credentials, not active certifications.
Electrical and photovoltaic qualifications
Romanian Level III qualification as Electrician constructor (2023) and specialization as Instalator sisteme fotovoltaice solare, COR 741103 (2023). These qualifications support my practical work as the founder of ElectroVerde.
Continuous professional development
Publicly verifiable learning includes IBM Security Zero Trust Principles, DORA & IBM Technology, Trustworthy AI and AI Ethics, IBM watsonx, IBM Generative & Agentic AI Foundation, and ISC2 Candidate.
A career spanning operations, consulting, and ownership
The common thread is accountability: understand the system, make the risk explicit, align the people involved, and follow through.
01 · University years
Built and operated a neighborhood mini-ISP
Grew a local network to roughly 200–300 customers, combining hands-on infrastructure, troubleshooting, customer support, and day-to-day operations.
02 · Before IBM · 2 years
Customs agent for DHL at Henri Coandă Airport
Worked in customs operations at Bucharest Otopeni Airport, where accuracy, documentation, deadlines, and regulated processes were central to daily work.
03 · IBM and consulting · 10+ years
Security, privacy, GRC, and regulated delivery
Moved from operations into enterprise consulting across risk, privacy-by-design, secure-by-design reviews, audit readiness, incident governance, PKI, and HSM contexts.
Experience and credentials
Download my resume
An English resume updated for my current security, privacy, GRC, consulting, and digital product profile.
Updated: June 2026 · PDF
Need security, privacy, or GRC expertise grounded in delivery?
For a role or advisory mandate, share the decision context, team, work model, expected outcomes, and timeline. I will respond with a clear view of fit and next steps.
Discuss the mandate