Open to opportunities

Julia User

@juliauser14

I improve cybersecurity governance through risk-based incident response, compliance readiness, and NIST-aligned security processes.

Poland

Message

What I'm looking for

I'm seeking GRC advisory work where I can apply incident response insight to risk assessments, NIS2 and DORA compliance, audit readiness, and governance framework design.

At PepsiCo's Cyber Fusion Center, I reduced mean time to containment for high-severity incidents across three or more business units using NIST-aligned, risk-based triage.

I turn incident findings into stronger governance by delivering root cause analyses, remediation recommendations, audit-ready documentation, and process improvements. I also identified gaps against NIST CSF best practices and proposed refinements adopted by the team.

Previously, at European Conferences United, I designed analytical frameworks for more than 200 C-level executives across Finance, HR, and Global Trade, while managing over 50 senior speakers annually with 100% on-time delivery.

I'm completing a B.Sc. in Computer Science and moving my operational security experience toward GRC advisory work spanning risk assessments, NIS2 and DORA compliance, and governance framework design.

Experience

Work history, roles, and key accomplishments

Cybersecurity GRC & Incident Response Analyst

PepsiCo

Jul 2025 - Jul 2026 (1 year)

Reduced mean time to containment for high-severity incidents across 3+ business units by applying a risk-based approach to triage aligned with NIST incident response guidelines. Strengthened security governance by delivering root cause analyses and remediation recommendations that informed process improvements and knowledge base documentation.

NIST CSF Incident Response Risk Assessment Root Cause Analysis Regulatory Compliance DORA Process Improvement

Education

Degrees, certifications, and relevant coursework

Wyższa Szkoła Bankowa

Bachelor of Science, Computer Science

2022 -

Pursuing a Bachelor of Science in Computer Science with relevant coursework in information security management, risk analysis, network security, and IT governance.