# Julia Tsavalas

Julia Tsavalas is a remote worker on Himalayas, Security and Compliance Specialist at CreditLogic, based in Ireland.

Source: https://himalayas.app/@juliatsavalas

```text
Security and Compliance Specialist at CreditLogic, leading ISO 27001 implementation and testing controls for GDPR and SOC 2 readiness.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Ireland |
| Authorized to work in | Ireland |
| Salary expectations | 80k+ EUR |
| Job categories | Security And Compliance Specialist, Security Risk Consultant, Information Security Analyst, Cybersecurity Consultant, Cybersecurity Analyst |
| Skills | Infosec, ISO 27001, Security Risk Assessment, Penetration Testing, Vulnerability Management, GDPR, SOC2 Compliance, NIST CSF, PCI DSS, Third Party Risk Management, Security Audits, Security Policy Development, Incident Response, Phishing Simulations, DLP |

## About

```text
At CreditLogic, I lead ISO 27001 implementation, internal audits, and continuous improvement, designing and testing controls aligned with NIST CSF, GDPR, and SOC 2 readiness. I also manage compliance reporting through Vanta and support client and regulatory audits.

At CreditLogic, I monitor Edgescan vulnerability findings and conduct manual penetration testing. I also perform risk assessments and support incident response and post-incident reviews.

At Asiera, I led ICT security assessments for clients and drove the organization’s ISO 27001 certification work, from scoping and policy development through internal audits and certification readiness. I also conducted penetration testing and phishing simulations.

Earlier, I worked in information security at Bon Secours Health System, Ernst & Young, and Nationwide Financial. My work included security audits and risk assessments, breach investigations, third-party security processes, PCI compliance, and a company-wide data protection chatbot.
```

## Experience

### Security and Compliance Specialist (current)

CreditLogic. Nov 2025 - Present

```text
Led ISO 27001 implementation, internal audits, and continuous improvement initiatives, designing and testing controls aligned to NIST CSF, ISO 27002, SOC 2 readiness, GDPR, and PCI DSS. Monitored Edgescan vulnerability findings and conducted manual penetration testing to validate and address exposure.
```

Skills: ISO-27001, NIST-CSF, SOC2, GDPR, PCI-DSS, Vanta, Edge-Scan, Penetration-Testing, Risk-Assessment, Incident-Response, Google-Workspace-Administration, Change-Advisory-Board

### Security and Risk Advisor

Asiera. Aug 2023 - Oct 2025

```text
Led ICT security assessments and risk analysis across on-premise and cloud environments for clients. Drove the organization to ISO 27001 certification, owning the implementation from scoping and policy development through internal audits and certification readiness.
```

Skills: IT-Security, Risk-Assessment, ISO-27001, NIST-CSF, GDPR, Penetration-Testing, Phishing-Simulations, IT-Security-Policies

### Information Security Analyst

Bon Secours Health System. Nov 2022 - Aug 2023

```text
Liaised with third-party SOC to ensure effective monitoring of IT infrastructure; led security audits and risk assessments nationwide. Directed Ireland-wide information security awareness programs and led breach investigations and phishing exercises.
```

Skills: SOC, Security-Audits, Risk-Assessment, Security-Awareness, Privacy-Breach-Investigations, Phishing-Simulations, Vendor-Management, Incident-Response

### Cyber Security Consultant

[Ernst & Young](https://himalayas.app/companies/ey). Nov 2021 - Oct 2022

```text
Managed end-to-end cybersecurity risk assessments for a top client across IT, third-party, and cloud systems. Led penetration testing coordination and security posture assessments against regulatory requirements and emerging threats.
```

Skills: Cybersecurity, Risk-Assessment, Penetration-Testing, Cloud-Security, OT-Security, IoT-Security, ISO-27001

### Cyber Security Analyst

[Nationwide Financial](https://himalayas.app/companies/nationwide). Oct 2019 - Jul 2021

```text
Completed IRM Security Shared Services apprenticeship across multiple network security disciplines. Triaged DLP incidents and built optimized DaR scans in McAfee for quarterly PCI compliance requirements.
```

Skills: DLP, McAfee, PCI-Compliance, Security-Awareness, Training, Data-Protection

### Senior Administrative Assistant

[Nationwide Financial](https://himalayas.app/companies/nationwide). Jan 2017 - Jan 2019

```text
Provided administrative support in a financial services environment.
```

### Account Change Representative

[Nationwide Financial](https://himalayas.app/companies/nationwide). Jan 2015 - Jan 2017

```text
Processed account changes and provided customer service.
```

## Education

### (ISC)²

CISSP (Certified Information Systems Security Professional), Information Security

```text
Certified Information Systems Security Professional (CISSP) certification with exam scheduled for November 2026.
```

### University College Dublin

Professional Academy Diploma, Ethical Hacking

```text
Professional Academy Diploma in Ethical Hacking from University College Dublin, completed in May 2025.
```

### Columbus State College

Cybersecurity Certificate, Cybersecurity

```text
Cybersecurity Certificate from Columbus State College, completed in March 2021.
```

### The Ohio State University

Master of Arts, French Education

```text
Master of Arts in French Education (K-12) from The Ohio State University, completed in May 2015.
```

### University of Cincinnati

Bachelor of Arts, French

```text
Bachelor of Arts in French with a Business Minor from the University of Cincinnati, completed in May 2012.
```

## Tech stack

- Vanta

To contact Julia, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Maeliosa Leamy](https://himalayas.app/@maeliosaleamy): Senior Vulnerability Analyst, LastPass
- [Keerthi Prabhakar](https://himalayas.app/@keerthiprabhakar): Senior Insider Risk Engineer, Twilio
- [Siddhant siddhant](https://himalayas.app/@siddhantsiddhant): Cyber Security Professor, City College
- [Patricia Hernandez](https://himalayas.app/@nicolehp): Governance, Risk & Compliance Analyst, Schneider Electric
- [Francesco Citti](https://himalayas.app/@francescocitti): Associate Security Engineer, Phorest Saloon Software
- [Nana Arezie Oduro-Asare](https://himalayas.app/@nanaarezieoduro-asar): Senior Manager, FSO Tech Resilience, EY Ireland
- [Dami Obasa](https://himalayas.app/@damiobasa): IT & Security Consultant, Large Assurance
- [Khan Imdad Ullah](https://himalayas.app/@khanimdadullah): Information Security GRC Consultant, Celticsecure Limited
- [Nikhil Somashekarappa](https://himalayas.app/@nikhilsomashekarappa): Senior IT Risk Specialist, PTSB
- [Deepanshu Raghuvanshi](https://himalayas.app/@deepanshuraghuvanshi): Cybersecurity Engineer, AppCard Inc