Thomas Mourtos

Worked as Senior Cybersecurity GRC Analyst at Mondelēz International.

- Orchestrated security and privacy incident response, driving rapid containment, mitigation, and root-cause analysis for critical events.
- Enforced regulatory compliance, embedding NIST and OWASP frameworks into core data protection policies and system architectures.
- Transformed third-party risk management, conducting the PoC and onboarding a dedicated TPRM platform alongside continuous vendor

- Led incident response operations, driving rapid containment and mitigation across security and privacy events.
- Governed GDPR and ISO 27001 compliance, aligning core standards with international regulatory frameworks.
- Identified critical compliance gaps, translating findings into prioritized remediation roadmaps.
- Embedded security and privacy-by-design across enterprise policies, new projec

- Directed IT and security operations, architecting, configuring, and hardening critical systems to ensure enterprise resilience.
- Governed the enterprise ISMS, authoring core security policies, implementing robust procedures, and driving full regulatory alignment.
- Led audit and certification programs, delivering successful ISO 27001, HIPAA, and Business Continuity audits while supporting ISO 9

- Automated client ISMS workflows, integrating ISO standards into BPM tools to streamline compliance processes.
- Conducted client operational discovery, interviewing key stakeholders to define requirements for GDPR, ISO 27001, and PIMS implementations.
- Drafted security policies and procedures, establishing baseline documentation aligned with ISO/IEC 27001 requirements.
- Executed risk assessmen

- Used markup languages like HTML for maintaining and improving website
- Created daily banners, images, promotions etc for display on the website and weekly Newsletters
- Generated and updated website content (products, content, promotions)
- Planed and implemented website changes and functional improvements
- Maintained and updated the online marketing plan for the website
- Monitored key perfor

- Handled sales of technology products, goods and services to customers, worked with customers to discover their needs, created solutions and ensured a smooth sales process.
- Kept management informed by submitting activity and results reports, such as daily sell reports, weekly quality reports, and monthly merchandising analyses.
- Monitored competition on daily basis by gathering current marketp

- Delivered project on time and within the estimated budget.
- Created engaging text and image for Newsletters and designed posts for social media pages.
- Measured Facebook Pages traffic and statistics and oversaw social media accounts’ layout.
- Training co-workers to use social media in a cohesive and beneficial way.
- Maintained online conversations with customers and responding to queries.
-

- Got familiar with CMS like Joomla, Wordpress and Magento.
- Worked also as a junior Content Managment Specialist.
- Used HTML, CSS, and JavaScript

- Handled sales of technology products, goods and services to customers, worked with customers to discover their needs, created solutions and ensured a smooth sales process.
- Kept management informed by submitting activity and results reports, such as daily sell reports, weekly quality reports.
- Monitored competition by gathering current marketplace information on pricing, products, new products

- Installed and configured computer hardware operating systems and applications.
- Monitored and maintained computer systems.
- Talked staff or clients through a series of actions, either face-to-face or over the telephone, to help set up systems or resolve issues.
- Setted up new user's accounts and profiles and dealed with password issues.
- Data recovery and Malware removal
- Replaced parts as

Sep 2021

Mar 2022

Oct 2022

Jul 2018

Nov 2018

Feb 2021

Apr 2023

Sep 2023

Mar 2023

Apr 2023

Jan 2024

Jan 2024

Dec 2024

Oct 2025

Mar 2026

Mar 2026