Looking for a job

Eleni Psichia

@elenipsichia

Cybersecurity GRC leader at Motor Oil Group, who scaled governance across seven Group companies and achieved zero audit nonconformities.

Greece

Message

At Motor Oil Group, I built and scaled cybersecurity governance across seven Group companies in regulated energy, refinery, retail, e-mobility and aviation environments. I led ISO 27001 governance for six certified companies, coordinated the transition to ISO/IEC 27001:2022, and achieved zero audit nonconformities.

I established a Group-wide cyber-risk methodology and oversaw third-party cybersecurity risk management across the vendor lifecycle. Through targeted training and simulations, I reduced the phishing-prone rate from 35% to 7%; I also managed five direct reports and developed risk and compliance dashboards in Power BI.

Experience

Work history, roles, and key accomplishments

Current

Group Head of Cyber Security GRC

Current

Motor Oil Group

Jun 2023 - Present (3 years 4 months)

Built and scaled cybersecurity governance across seven Group companies in regulated energy, refinery, retail, e-mobility and aviation environments. Led ISO 27001 governance for six certified Group companies, expanding scope and coordinating the transition to ISO/IEC 27001:2022, with zero audit nonconformities.

ISO 27001 ISO 22301 NIST CSF NIST RMF NIS 2 Third Party Risk Management SOC2 PCI DSS Power BI Team Leadership CIS Aligned Hardening Risk Assessment Vendor Risk Management

Information Security GRC Specialist

Motor Oil Group

Feb 2021 - Jun 2023 (2 years 4 months)

Developed cybersecurity KPIs, KRIs and compliance metrics and translated them into Power BI dashboards for risk, control and remediation reporting. Supported PCI DSS compliance across POS and e-commerce payment environments, including control assessments, evidence collection, remediation and SAQ activities.

Power BI PCI DSS KPI KRI Framework Development Compliance Reporting Policy Development Risk Management

Information Security Engineer

Motor Oil Group

Jan 2018 - Feb 2021 (3 years 1 month)

Delivered technical security controls across Azure, identity, endpoint and infrastructure environments. Supported SIEM and vulnerability-management programmes across Group assets, coordinating findings, remediation and technical risk reduction with IT teams.

Azure SIEM Vulnerability Management Endpoint Security Security Architecture Penetration Testing Security Configuration