o Conduct comprehensive Information security assessments to identify
and mitigate potential threats and weaknesses.
o Review and enhance the ISMS 27002 framework to ensure compliance.
o Develop and deploy a GRC-tool, information security training materials.
o Established and monitor Key Risk Indicators (KRIs).
o Implement third party information security clauses and related due
diligence methodologies, strengthening third party risks.
o Contribute to the implementation of DORA-NIS2 regulations.
o Review and update the operational risk taxonomy, encompassing all
operational risks, incl. ESG (climate) risks for a robust risk framework.
o Facilitate climate risk awareness sessions, fostering understanding as a
crucial step towards implementing necessary changes.
o Established a comprehensive IT-risk related framework.
o Managed and mitigated IT-related risks effectively.
o Contributed to the development and implementation of a GRC-tool for
risk monitoring and management (RSA Archer).
External consultant for a global Third-Party Risk Management mission:
o Risk & Control on different topics such as Business Continuity
Management and Information Security.
Governance of the Institute, Chairman Education Committee.
Governance of the Institute, Chairman Education Committee.
Two different roles, with strong dual reporting lines at the HQ in Denmark:
• Operational Risk Manager for the BELUX countries
o Monitored company risks, enhanced contractual compliance of third
parties, conducted on-site operational risk assessments…
• Internal Audit Manager for the BENELUX countries:
o Developed policies, created annual plans, executed operational audits
and ensured follow-up on recommendations.
Two different roles for two different entities:
o Set-up and roll-out of the Enterprise Risk Mgt (ERM) across the Group
Health insurances. Developed and deployed COSO-ERM policies.
o Responsible for Internal Audit at two Hospital insurance companies.
Established policies, executed audits. Reported to the Audit Committee.