Open to opportunities

George Mutune

@georgemutune

Message

Senior GRC and technical cybersecurity manager driving compliance and risk reduction.

Sweden

Message

What I'm looking for

I seek a role where I can lead cross-functional cybersecurity and compliance programs, drive certification readiness, mentor teams, and embed risk-based practices in a collaborative, growth-oriented organization.

I am a Senior GRC and Technical Cybersecurity Manager with over nine years of global experience aligning organizations with SOC 2, PCI DSS, NIS 2, ISO/IEC 27001, GDPR and OT/IT security frameworks.

I have led EU-wide compliance programs, built and maintained ISMS, and supported audit and certification readiness for multinational environments, delivering measurable improvements in security posture and business continuity.

I bridge technical and business priorities by managing cross-functional teams, vendor risk, incident management, and security awareness initiatives, while translating regulatory requirements into actionable roadmaps and controls.

My work has been commended by clients including Alfa Laval and Tetra Pak for structured, proactive program delivery and by Pulsar Security for high-quality technical documentation.

Experience

Work history, roles, and key accomplishments

Current

Technical Cybersecurity Program Manager

Current

Nexer Telescope

Jan 2023 - Present (2 years 8 months)

Led an EU-wide cybersecurity compliance program aligning NIS 2 and ISO/IEC 27001 across multiple entities, developing policies, controls, and remediation plans to improve audit readiness and security posture.

NIS 2 ISO 27001)Compliance Program Management Risk Assessment Policy Development Stakeholder Engagement Security Awareness

Cybersecurity Engineer

Nexer Telescope

Jan 2022 - Jan 2023 (1 year)

Bridged engineering and compliance teams to address cybersecurity gaps for automation systems, conducted gap assessments and risk-based testing, and prepared documentation for regulatory approval by IACS/DNV.

Risk Assessment Compliance Roadmaps Asset Inventory Regulatory IaC

Cybersecurity Writer & Documentalist

Grapheene

Jan 2021 - Jan 2022 (1 year)

Created technical documentation, whitepapers, and datasheets translating encryption technology for diverse audiences and served as a subject-matter expert in the community.

Technical Writing Documentation Encryption Whitepapers Data Sheets

Cybersecurity Specialist

Ignyte Assurance Platform

Jan 2018 - Jan 2022 (4 years)

Designed compliance roadmaps and maintained cybersecurity assurance frameworks based on NIST CSF and ISO/IEC 27001, conducted assessments, and partnered with audit teams to deliver assurance documentation.

NIST CSF ISO 27001)Compliance Roadmaps Security Frameworks Training Delivery

Governance, Risk & Compliance Officer

CyberMoran Solutions

Jan 2014 - Jan 2022 (8 years)

Built and maintained ISMS for clients, conducted compliance audits and awareness campaigns, and advised on data protection, risk management, and business continuity to strengthen security posture.