Open to opportunities

Lum Rina

@lumrina

Cybersecurity GRC Consultant | Risk & Compliance | Data Protection | ISO 27001, GDPR, NIS2 | Open to Relocation (Portugal/EU)

Cameroon

Message

What I'm looking for

I am seeking a role in Cybersecurity Governance, Risk, and Compliance (GRC) where I can support organizations in meeting regulatory requirements (ISO 27001, GDPR, NIS2) while strengthening their security posture.

I am a Cybersecurity Governance, Risk, and Compliance (GRC) Consultant with hands-on experience supporting organizations in achieving regulatory compliance, managing risks, and strengthening digital resilience.

With a background in Business Administration and Cybersecurity Analysis, I bring a unique combination of business acumen and technical expertise to bridge the gap between executive leadership, regulatory requirements, and IT security operations.

My experience includes:

Implementing ISO 27001-based ISMS frameworks
Supporting compliance with GDPR, NIS2, and PCI-DSS
Designing and monitoring risk management and data protection policies
Conducting security awareness and compliance training programs
Contributing to SOC processes (SIEM, Wazuh, pfSense, Wireshark, Snort IDS/IPS) for effective incident response

I am passionate about helping organizations meet compliance obligations while enabling innovation and growth securely.

Currently, I am looking for opportunities in Portugal and wider EMEA, where I can contribute to building strong cybersecurity governance frameworks while continuing to expand my expertise in data protection, third-party risk management, and regulatory compliance.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity GRC Consultant

Current

AMDARI.io

Feb 2023 - Present (2 years 8 months)

- Deliver advisory on data protection and regulatory compliance for an e-commerce company preparing for audit.
- Conduct gap analyses against GDPR and ISO 27001, advising management on risk mitigation.
- Partner with IT, Risk, and Legal to implement data governance frameworks.
- Promote privacy culture through staff awareness sessions.

ISO 27001 NIST 800 53 GDPR Compliance Data Protection Risk Management Compliance Monitoring Security Awareness GRC

Cybersecurity Analyst

10Alytics.io

Jan 2021 - Dec 2023 (2 years 11 months)

- Oversaw data protection incident monitoring and response (access violations, suspicious logins, breaches).
- Performed DPIAs and privacy risk assessments in line with GDPR requirements.
- Collaborated with CISOs, DPOs, and IT teams to design operational privacy and security controls.
- Produced technical and executive-level reports for decision-makers.

SOC Operating System Network Protocols Virtualization Penetration Testing

Cybersecurity Analyst (SOC & Risk)

10Alytics.io

Jan 2021 - Dec 2023 (2 years 11 months)

Monitored incidents and led data protection response, performed DPIAs and privacy risk assessments aligned to GDPR, and produced technical and executive reports to inform security decisions.

Security Operations Incident Response GDPR)Reporting

Sales Representative

One World Business SA

Jun 2017 - Dec 2020 (3 years 6 months)

Exceeded quarterly sales targets by 20–35%, grew client base 50% and drove a 30% regional revenue increase through targeted outreach, campaigns, and long-term client relationship management.

Sales Strategy Lead Generation Client Relationship Management Campaign Execution Market Expansion Negotiation Reporting Networking

Junior Sales Associate

One World Business SA

Mar 2014 - May 2017 (3 years 2 months)

Closed over $0.5M in new deals in the first year, contributing to a 10% team revenue uplift and led marketing initiatives adopted company-wide that increased visibility by 20%.

Sales Closing Marketing Strategy Revenue Growth Lead Generation Cross Functional Collaboration