Looking for a job

Julia Tsavalas

@juliatsavalas

Security and Compliance Specialist at CreditLogic, leading ISO 27001 implementation and testing controls for GDPR and SOC 2 readiness.

Ireland

Message

At CreditLogic, I lead ISO 27001 implementation, internal audits, and continuous improvement, designing and testing controls aligned with NIST CSF, GDPR, and SOC 2 readiness. I also manage compliance reporting through Vanta and support client and regulatory audits.

At CreditLogic, I monitor Edgescan vulnerability findings and conduct manual penetration testing. I also perform risk assessments and support incident response and post-incident reviews.

At Asiera, I led ICT security assessments for clients and drove the organization’s ISO 27001 certification work, from scoping and policy development through internal audits and certification readiness. I also conducted penetration testing and phishing simulations.

Earlier, I worked in information security at Bon Secours Health System, Ernst & Young, and Nationwide Financial. My work included security audits and risk assessments, breach investigations, third-party security processes, PCI compliance, and a company-wide data protection chatbot.

Experience

Work history, roles, and key accomplishments

Current

Security and Compliance Specialist

Current

CreditLogic

Nov 2025 - Present (1 year)

Led ISO 27001 implementation, internal audits, and continuous improvement initiatives, designing and testing controls aligned to NIST CSF, ISO 27002, SOC 2 readiness, GDPR, and PCI DSS. Monitored Edgescan vulnerability findings and conducted manual penetration testing to validate and address exposure.

ISO 27001 NIST CSF SOC2 GDPR PCI DSS Vanta Edge Scan Penetration Testing Risk Assessment Incident Response Google Workspace Administration Change Advisory Board

Security and Risk Advisor

Asiera

Aug 2023 - Oct 2025 (2 years 2 months)

Led ICT security assessments and risk analysis across on-premise and cloud environments for clients. Drove the organization to ISO 27001 certification, owning the implementation from scoping and policy development through internal audits and certification readiness.

IT Security Risk Assessment ISO 27001 NIST CSF GDPR Penetration Testing Phishing Simulations IT Security Policies

Information Security Analyst

Bon Secours Health System

Nov 2022 - Aug 2023 (9 months)

Liaised with third-party SOC to ensure effective monitoring of IT infrastructure; led security audits and risk assessments nationwide. Directed Ireland-wide information security awareness programs and led breach investigations and phishing exercises.

SOC Security Audits Risk Assessment Security Awareness Privacy Breach Investigations Phishing Simulations Vendor Management Incident Response

Cyber Security Consultant

Ernst & Young

Nov 2021 - Oct 2022 (11 months)

Managed end-to-end cybersecurity risk assessments for a top client across IT, third-party, and cloud systems. Led penetration testing coordination and security posture assessments against regulatory requirements and emerging threats.

Cybersecurity Risk Assessment Penetration Testing Cloud Security OT Security IoT Security ISO 27001

Cyber Security Analyst

Nationwide Financial

Oct 2019 - Jul 2021 (1 year 9 months)

Completed IRM Security Shared Services apprenticeship across multiple network security disciplines. Triaged DLP incidents and built optimized DaR scans in McAfee for quarterly PCI compliance requirements.

DLP McAfee PCI Compliance Security Awareness Training Data Protection