Looking for a job

Simona Serban

@simonaserban

Message

I automate cloud compliance and audit readiness for global SaaS platforms.

Romania

Message

What I'm looking for

I’m looking for a fully remote role in an EU timezone where I can modernize cloud compliance, automate evidence collection, strengthen audit readiness, and translate complex security requirements into practical outcomes.

At Oracle, I lead compliance automation for global SaaS platforms, mapping C5, BaFin, and FINMA controls and building evidence pipelines across OSCAR, Jira, and Confluence. I reduced external audit duration by 50% through standardized evidence collection.

Across Oracle, Ericsson, Mantu, and HIAROM INVEST, I’ve delivered ISO 27001, SOC 2, GDPR, risk assessment, audit, and management-system work. I translate security controls into clear business language and support cloud compliance across evolving requirements including NIS2, AIC4, KRITIS, and sovereign cloud.

Experience

Work history, roles, and key accomplishments

Current

Senior Principal Regulatory Compliance Specialist

Current

Oracle

Dec 2022 - Present (3 years 9 months)

Led end-to-end compliance automation for global SaaS platforms, mapping external controls to internal standards and automating evidence collection. Managed attestation audits and reduced external audit duration by 50%.

BaFin FINMA KRITIS NIS 2 AIC4 Cloud Compliance Compliance Automation Risk Assessment Audit Management SaaS Cloud Native Controls OSCAR Jira Confluence

Security Compliance Analyst

Ericsson

Sep 2021 - Dec 2022 (1 year 3 months)

Managed information security compliance against ISO 27001 and contractual obligations, conducting risk assessments and security reviews. Facilitated security exception approvals and closed 80% of identified gaps.

ISO 27001 Risk Assessment Security Audits Access Reviews Security Baselines Vulnerability Remediation

Regional Compliance Officer

Mantu

Jan 2020 - Aug 2021 (1 year 7 months)

Owned the Integrated Management System ensuring certification across five ISO standards and full GDPR compliance. Led ISO 45001 implementation and conducted internal audits across six compliance areas.

ISO 9001 ISO 27001 ISO 45001 ISO 14001 ISO 50001 GDPR Internal Audit Document Management

Data Protection Officer & Quality/Environmental/HSE Auditor

HIAROM INVEST

Aug 2010 - Jan 2020 (9 years 5 months)

Served as certified DPO, leading GDPR implementation and training 70 staff. Managed the Integrated Management System across ISO 9001, 14001, and OHSAS 18001, maintaining certification for eight years.

GDPR DPIAs ISO 9001 ISO 14001 OHSAS 18001 Internal Audit Training IMS