Magdalena Kowalik

Conducted risk assessments using the NIST Cybersecurity Framework, identifying and addressing critical security gaps, improving the organization's overall risk posture. Owned and maintained ISO 27001 -aligned ISMS components, including risk assessments, control mapping, evidence collection, and audit readiness, supporting successful internal and external audits. Achieved a 95% compliance rate through regular User Access Reviews (UAR) and Privileged Access Reviews (PAR), mitigating security risks in line with industry standards. Provided strategic insights to executive leadership on cybersecurity risks, ensuring alignment with SOX, GDPR, and ISO 27001 requirements. Drove third-party/vendor risk assessments by reviewing SOC 2 reports, ISO 27001 certifications, penetration test findings, and cloud security configurations. Collaborated with cross-functional teams to develop cybersecurity best practices, improving security awareness across departments by 40%.

Conducted security risk assessments and control testing, identifying and addressing 30 critical vulnerabilities, enhancing the company's risk management processes. Developed and facilitated security training programs, increasing awareness and adherence to security best practices by 25%. Coordinated SOX compliance audits with a 100% success rate, ensuring full regulatory compliance and mitigating operational risks. Monitored and reported on cybersecurity risk remediation efforts, ensuring timely resolution of identified vulnerabilities and compliance issues. Partnered with development teams to integrate Secure Development Lifecycle (SDLC) practices, reducing security vulnerabilities by 20%.