I am a GRC and cybersecurity consultant with experience connecting technical security requirements with business objectives. I specialize in translating complex regulatory and cybersecurity topics into practical actions for management boards and non-technical teams.
I conduct ISO/IEC 27001 internal audits, support NIS2, DORA and Polish National Cybersecurity System Act compliance, and create ISMS documentation, audit reports and supplier risk assessments. I also develop self-assessment tools and implementation-ready documentation templates.
I combine cybersecurity consulting with active sales and business development. I acquire clients proactively, manage full sales cycles from needs analysis and proposals to negotiations and contract closing, and build relationships with technology partners and subcontractors.
I deliver live client and internal training sessions, webinars and educational materials on topics including NIS2, ISO 27001, DLP, incident response, authentication and data protection. My webinars have reached audiences of up to 300 live participants.
Before moving into cybersecurity, I spent 18 years as an English-Polish technical translator and business owner. This background strengthened my ability to work across legal, engineering, financial and IT domains and communicate effectively between specialists and decision-makers.