Loading profile…
Lucy Goodman (Didb)
Looking for a jobGRC Manager and Data Privacy Officer
GRC Manager and Data Privacy Officer at Artisan, who built its compliance program and achieved a clean SOC 2 Type II report for Ava V2.
United StatesGRC Manager and Data Privacy Officer at Artisan
Experience
GRC Manager and Data Privacy Officer
Sole owner of GRC, privacy, and regulatory compliance at a Y Combinator-backed AI company. Built the compliance function from the ground up, achieved a clean SOC 2 Type II report, and led GDPR, EU AI Act, and security initiatives.
SOC2GDPREU AI ActISO 42001DrataSafeBaseOneTrustCookiebotSSOMFASCIMAWSGitHubN8nClaudeREST APIsWebhooksThird Party Risk ManagementVulnerability ManagementPenetration TestingIncident ResponseSecurity Awareness Training
Senior GRC and Privacy Consultant
Led AI data privacy initiatives, ensuring sensitive PII and PHI in datasets was identified, labeled, and redacted in line with GDPR, HIPAA, and global privacy standards. Developed n8n automation workflows with API and webhook integrations to streamline compliance processes.
GDPRHIPAAAI GovernanceData PrivacyData RedactionN8nREST APIsWebhooksPrivacy Impact AssessmentData Quality
Senior Privacy, Security and Compliance Engineer
Led OneTrust implementation to eliminate the PIA backlog and improve processing efficiency by 40%. Directed compliance and security for the Webex Contact Center business unit, managing audits and remediation for SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.
OneTrustN8nJiraGDPRSOC2ISO 27001HIPAAPCI DSSPrivacy Impact AssessmentDSARIncident ResponseVulnerability ManagementExecutive Reporting
Compliance Program Manager
Directed compliance program management for the Webex Contact Center business unit, coordinating legal, security engineering, and product on regulatory commitments and audit readiness. Led an overhaul of the privacy and security policy framework, restructuring 38 policies and 60+ SOPs into an audit-ready governance library.
SOC2ISO 27001HIPAAPCI DSSAudit ReadinessPolicy GovernanceStakeholder ManagementProgram Management
Senior Lead GRC and Security Engineer
Drove end-to-end compliance strategy for digital health platforms covering HIPAA, SOC 2, PCI DSS, and vendor risk. Delivered a clean SOC 2 report after a 3-year lapse following acquisition integration.
HIPAASOC2PCI DSSRSA ArcherEvidentCheckmarxSecurity Incident HandlingExecutive DashboardsVendor Risk Management
Senior Security Specialist
Performed enterprise risk assessments and control design aligned with SOX, NIST, and SOC 2. Developed security awareness training, compliance documentation, and privacy artifacts.
SOXNISTSOC2Risk AssessmentSecurity Awareness TrainingCompliance Documentation
Information Security Manager
Managed information security functions, including risk assessments, policy development, and compliance initiatives.
InfosecRisk ManagementPolicy DevelopmentCompliance
IT GRC Consultant
Provided IT governance, risk, and compliance consulting services, including risk assessments and control design.
GRCRisk AssessmentComplianceIT Governance
Customer Support Information Security Director
Directed information security for customer support operations, ensuring compliance and data protection.
InfosecCustomer SupportData ProtectionCompliance
Cyber Security Defense Coordinator
Coordinated cyber security defense activities, including incident response and vulnerability management.
CybersecurityIncident ResponseVulnerability ManagementDefensive Coordination
Access Management Analyst
Managed access management processes, including identity and access controls.
Access ManagementIAM
Education
University of Buenos Aires
Bachelor of Science in Computer Science from the University of Buenos Aires.