Lucas Garzarolli

https://nospia.com Our offer includes individually tailored services and products for overcoming your data protection and information security challenges (available in English and German). Safeguard your business, become legally compliant with privacy laws and regulations and strengthen the trust in your company with our products and services. Among other things, we offer the following.

Managing internal and external data protection and information security projects, holding workshops and trainings for clients with critical infrastructure in industry and healthcare.

Maturing our information security and privacy (GDPR, CCPA) standards: mindset, processes, communication, product improvements, policies and agreements. Leading initiatives to establish and continuously improve an Information Security Management System (ISMS) resulting in a successful ISO 27001 certification. Collaborating with internal teams, suppliers, prospects and customers to address information security and privacy requirements of all relevant stakeholders.

Introducing and optimising infosec and compliance processes and supporting material. Project Lead for various security and privacy projects (e.g. ISO 27001 preparation). Raising Security Awareness in the company and implementing a security education program. Streamlining process for customers' security assessments and participating in negotiations (DPAs, Information Security issues).

Consulting in various fields, including: privacy and GDPR, information security, risk management, system migration, digitalization and business process optimization projects. IT-Auditing (assessment of operational risks and internal controls) of small and large scale organizations in the public and private sector across a wide range of different industries. Analysis of (mass) data and development of dashboards using different tools, including: Qlikview, ACL, Excel Analytics.

Supporting project management and optimizing project execution, by developing metrics and analyzing data of ongoing and completed projects. Administration and development of the central project management platform. Design and implementation of an appropriate authorization concept to resolve SOD conflicts and operational access management. (previously Fujitsu Semiconductor Embedded Solutions Austria GmbH, change of ownership and name in 03/2015)

Information & Knowledege Management