Raul Vasile

Technical lead within the Cybersecurity Risk Analysis function, providing technical direction, guidance and delivery oversight for complex automotive cybersecurity programs, supporting resolution of complex technical and methodological challenges in vehicle networks/ ECUs, AUTOSAR / LINUX/ QNX environments, SDV solutions. Oversee delivery of cybersecurity risk artefacts in accordance with UNECE R155 and ISO/SAE 21434. Lead and support TARA methods implementation. Effective client/ vendor interactions.

Cybersecurity risk-analysis (E/E Risk & Architecture function), supporting activities across the right-hand side of the automotive V-model. Cybersecurity risk artifacts in accordance with UNECE R155 and ISO/SAE 21434, including TARA, Security Concepts and Security Specifications. Designed and supported implementation of SecPD for SAE Level 4 / highly automated vehicle programs. - Supported process formalization, tool integration for Vehicle networks and ECU security, Intrusion Detection Systems (IDS)

Managed security, operational-risk, internal-control and forensic-investigation activities across an international Oil & Gas environment. Conducted business and IT systems risk assessments, IT advisory reviews, project assessments and third-party IT testing. Supported security incident response, cyber-fraud investigations and other investigations affecting business operations. Covered both Enterprise IT and Industrial Control Systems (ICS) environments.

Responsible for Information Security and Internal Control activities across multiple Group entities. Defined and supported the framework for integrated Information Security and Internal Control activities. Identified high-risk business systems and areas and performed detailed technology and information-security risk assessments. Assessed the Group ISMS and security of critical systems. Planned and executed risk assessments using recognised industry frameworks.

Managed international risk and audit assignments across business processes, information systems and security environments. - Managed cross-border assignments and teams of up to 12 people. - Planned and executed risk-based audits and assessments. - Designed, implemented and enhanced Information Security programmes in cooperation with business and technology functions. - Assessed vulnerabilities, security controls and emerging security threats. - Performed organisational cyber-risk assessments using SOX,

Provided advisory services across Information Security, operational risk, internal controls and investigations for international clients. Managed assignments involving risk procedures, Information Security, fraud investigations and stakeholder coordination. Worked with legal counsel, government authorities, shareholder representatives and internal audit committees. Participated in a major global FCPA investigation within the pharmaceutical sector. Performed operational-security competence reviews