GRC BUSINESS CONSULTANT MANAGER

SUMMARY Dedicated certified specialist with +10 years significant experience in Governance Risk and Compliance, Information Security and Data Privacy Business and Technology consulting and advisory; development and establishment business gaols, objectives and plans, processes and procedures from scratch, existing solution analysis and maturity assessment; new solutions design and development. Domain areas: Governance Risk and Compliance (GRC), Information Security Management System (ISMS), Information Security Risk Management (ISRM), Privacy Information Management System (PIMS); Supply Chain Security Risk Management, Third Party Risk Management; Regulatory Compliance: ФЗ- 152, GDPR, CCPA, HIPPA, PCI DSS Regulatory Compliance; InfoSec Standards: ISO 27k, NIST CSF, NIST 800-53, Data Governance, Data Privacy, Data Protection, Business Solution Consulting, Enterprise Applications, Financial Services, Retail Banking, Audit procedures, Client on Boarding - KYC- CDD – EDD. Services: Business and Technology Solution Consulting services, GRC Program Consultancy, Compliance Assurance, Solution, Program-processes- procedures Maturity Assessment and Recommendation for Improvement. Industries: IT, Insurance, Finincial, Education, Retail, Supply Chain, Healthcare, Delivery, Manufactory, etc. SKILLS GRC Consultancy expertise: Client´s GRC Strategic and Tactical Plans/Programs/Systems plaining, design, development and implementation: Privacy Information Management System (PIMS), Risk Management Program (RMP), Data Governance Program; Change Management and Incident management, Business Continuity (BVP) and Disaster Recovery (DRP) plans. Information Security Management System (ISMS): ISMS strategy and goals identification and establishment; ISMS design and development. Establishment and integration into Client business culture and operational processes of ISMS Frameworks, such us ISO 27k, NIST CSF, NIST 800-53; IS Framework requirements Compliance Assessment and Assurance. Data Governance: DG Strategy and vision definition; DG Compliance; DG Program design and development Data Management Frameworks: data discovery, classification, mapping, privacy, and protection. Data Privacy and Protection: ФЗ-152, GDPR, CCPA, HIPAA, DGA, PIPL Compliance Assessment and assurance; PIMS design and development. Information Security and Data Privacy Compliance assessment: ISO 27001, ISO 22301, ISO 27701, GDPR, CCPA, HIPPA, etc. ISMS Documentation Management: Definition of the scope and creation of the Written Information Security Program (WISP), including policies, process and procedures, guidelines etc., based on the clients’ goals and obligations and/or results of current state/GAP analysis. Organization of the documents management Lifecycle procedures, ownership, responsibilities, versioning, collaboration and etc. Risk Management: ISO 3100, NIST RMF, FAIR, COBIT. Business Continuity and Disaster Recovery: ISO 22301, DORA, PRA, FCPA Business and Technology Solution Consulting services: Providing GRC Consultancy, Analytics, Advisory services in a Strategy, Solution, Software development projects for the Customers from different industry: Supply Chain, Financial services, Business Information and Media, Healthcare, Life science, etc. • Pre-sale proposal development; Plan and implement Consulting Services required for the project, focused on Customer goals; Negotiating with customer in closing a deal. • Solution Strategy development; Advise on and establishing Framework (solution, people, process, technologies), Development and Delivery approaches the most fit to company goals and objectives. • Advising on best practices/experiences and solution capabilities to customers; Target Solution Advisory, Design and Development; Solution Preparation/Management/Proposal. • Benchmark Analysis; As-is Analysis; GAP Analysis; Target Solution Plaining; Awareness training and communications; Technology Solution Architecture design; Road map and improvement plan advising. Advanced Technology: Understanding the organization, Business Analysis Approach Definition, Vision, Software Development Methodology, Discovery conducting, Solution definition, Business analysis activities planning, Requirements approval and prioritization awareness, UI Prototyping, UAT conducting, Business need definition, BA artifacts documentation, Elicitation and Collaboration, Business analysis information management, Stakeholders management, Business Analysis, Audit, Requirements traceability management. Industries: Insurance, Retail, Healthcare, Financial, Delivery, Manufactory Soft & Leadership Skills Communication and Consultancy: Business Needs Identification, Consultancy, Capability Model. Stakeholder Management: Client´s and External, and Internal teams stakeholders engagement, involvement planning and organization. Facilitation of the Stakeholders communications and collaborations management. Leadership and People Management: Project team formation, teamwork planning, organization, oversee and management; teamwork facilitation; employees advising and coaching, Team Leadding and Coaching.. Conflict resolution: active listening, identifying the root cause of the conflict and finding mutually agreeable solutions. Learning and Development: Develop GRC Knowledge Base and training courses. Knowledge Base sessions and awareness training conducting for the team members. Personal development Plan for team members. Customer Awareness Training Development and training conducting. Project and Product (P&P) Management: P&P planning, P&P Management, Organization Modelling, P&P Risk Management, P&P Progress and cjange Management.

Мария Склярова·

1

·0·

2026-10-21