Lucy Goodman (Didb)

Sole owner of GRC, privacy, and regulatory compliance at a Y Combinator-backed AI company. Built the compliance function from the ground up, achieved a clean SOC 2 Type II report, and led GDPR, EU AI Act, and security initiatives.

Led AI data privacy initiatives, ensuring sensitive PII and PHI in datasets was identified, labeled, and redacted in line with GDPR, HIPAA, and global privacy standards. Developed n8n automation workflows with API and webhook integrations to streamline compliance processes.

Led OneTrust implementation to eliminate the PIA backlog and improve processing efficiency by 40%. Directed compliance and security for the Webex Contact Center business unit, managing audits and remediation for SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.

Directed compliance program management for the Webex Contact Center business unit, coordinating legal, security engineering, and product on regulatory commitments and audit readiness. Led an overhaul of the privacy and security policy framework, restructuring 38 policies and 60+ SOPs into an audit-ready governance library.

Drove end-to-end compliance strategy for digital health platforms covering HIPAA, SOC 2, PCI DSS, and vendor risk. Delivered a clean SOC 2 report after a 3-year lapse following acquisition integration.

Performed enterprise risk assessments and control design aligned with SOX, NIST, and SOC 2. Developed security awareness training, compliance documentation, and privacy artifacts.

Managed information security functions, including risk assessments, policy development, and compliance initiatives.

Provided IT governance, risk, and compliance consulting services, including risk assessments and control design.

Directed information security for customer support operations, ensuring compliance and data protection.

Coordinated cyber security defense activities, including incident response and vulnerability management.

Managed access management processes, including identity and access controls.

Bachelor of Science in Computer Science from the University of Buenos Aires.