Acerca de Lucia
I help organisations navigate EU digital regulation — turning complex compliance requirements into operational action.
My focus is GDPR, NIS2, DORA, and the EU AI Act. I work with technical teams, legal counsel, and C-level stakeholders to build governance frameworks that are functional, not just documented.
Background includes data protection and OT security at BASF, and compliance work at Santander Group across multiple jurisdictions. I hold CISM, CIPP/E, CIPM, and FIP certifications.
Available for remote advisory engagements, fractional DPO/CISO support, and regulatory monitoring retainers.
Español
Bilingüe o nativo
Inglés
Competencia profesional completa
Portugués
Competencia profesional básica
Acepta trabajo presencial
Madrid (hasta 50 km), Barcelona (hasta 10 km), Málaga (hasta 10 km)
Experiencia
- FreelanceData Privacy, Tech Policy & GRC Consultantenero de 2025 - Hoy (1 año y 7 meses)Madrid, España● Cross-border privacy & compliance: DSARs, DPIAs, data mapping, GDPR/CCPA/LGPD/PIPL & regulator engagement.● GRC & Cybersecurity: NIS2, DORA, ISO 27001 & COBIT; risk registers & incident-response planning.● AI Ethics & Tech Policy: EU AI Act and Digital Markets Act regulatory alignment, governance impact assessments, data-access transparency analysis, and policy advisory for digital platform ecosystems.
- BASF Digital SolutionsCybersecurity Governance, Risk & Compliance Managerenero de 2024 - febrero de 2025 (1 año y 1 mes)Madrid, Spain● Built and monitored cyber risk frameworks aligned with ISO 27001, NIST CSF, and CMMC.● Defined KPIs, dashboards, and maturity models for global IT/OT systems.● Led compliance audits, remediation plans, and internal control automation.● Coordinated third-party risk initiatives and executive-level reporting.
- BASF Digital SolutionsGlobal Data Privacy Specialistjunio de 2021 - diciembre de 2023 (2 años y 6 meses)Madrid, Spain● Managed privacy compliance in 20+ countries, including DPIAs, TIAs, and vendor assessments.● Reviewed SCCs, data processing agreements, and global consent management.● Delivered internal privacy training and incident response documentation.● Embedded privacy-by-design with product, IT, and legal teams.● Advised digital product teams on Privacy-by-Design in customer-facing platforms, supporting DPIAs and controller/processor role allocation.
Recomendaciones
Sé el primero en recomendar a Lucia
Ayuda a este freelance a destacar compartiendo tu experiencia.
Estos perfiles de freelance también coinciden con tus criterios
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Formación
- Master of Public ManagementPotsdam University2016Master of Public Management
- Master in Government & Public AdministrationOrtega y Gasset & UIMP2015Master in Government & Public Administration
Certificados
- CISM (Certified Information Security Manager)ISACA2024
- CIPM (Certified Information Privacy Manager)IAPP2022