Cyber Risk | GRC | ISMS | Operational Resilience | AI Governance

Cybersecurity & AI Risk Advisor

Cybersecurity and technology risk profile focused on cyber risk assessments, security governance, ISMS, operational resilience, regulatory alignment and AI governance.

20+ Cybersecurity assessments led
100+ Stakeholders coordinated
Regulated Experience in risk-sensitive environments
Flavia Conti Rossini profile picture

Consulting Profile

Cybersecurity, technology risk and AI governance profile with a strong business, governance and stakeholder management foundation.

20+Cybersecurity assessments led
100+Stakeholders coordinated
ISO 27001 • NISTSecurity governance and controls
FINMA • DORARegulatory and resilience context

Expertise

Cybersecurity, governance and resilience focus areas.

Cyber Risk & Assessments

  • Risk assessments
  • Gap analyses
  • Control evaluations
  • ISO 27001 / NIST CSF

Governance, Risk & Compliance

  • ISMS support
  • Security governance
  • Regulatory alignment
  • FINMA / DORA / GDPR

Operational Resilience

  • Business continuity
  • Operational risk
  • Resilience controls
  • Audit preparation

AI Risk & Governance

  • AI risk topics
  • EU AI Act awareness
  • Responsible AI
  • GenAI risk context

Selected Experience

Consulting-style work across cyber risk, governance and resilience.

Cybersecurity Assessments

Assessment planning, execution and follow-up

Led and coordinated cybersecurity assessments across Switzerland for an international organization, covering planning, risk evaluation, stakeholder coordination, findings presentation and remediation follow-up.

Security Governance & ISMS

Governance structures and control improvement

Worked on governance structures, security controls, ISMS-related processes and audit preparation activities in regulated and critical environments.

Operational Resilience

Regulatory and resilience-oriented control reviews

Contributed to control reviews in banking and insurance contexts, including operational resilience, business continuity, cyber risk and regulatory requirements.

AI Risk & Cyber Advisory

Cybersecurity, compliance and emerging technology

Developed AI risk and governance material at the intersection of cybersecurity, compliance and emerging technology.

Frameworks, Regulation & Risk Domains

Working knowledge across risk, governance and security domains.

Frameworks

ISO 27001 NIST CSF IEC 62443 IKT-Minimalstandard

Regulation & Governance

FINMA DORA GDPR / DSG EU AI Act ISMS Security Governance

Risk & Resilience

Cyber Risk Assessments Gap Analyses Operational Resilience BCM Security Controls

Technology & Methods

Azure AWS Fundamentals Splunk Linux Basics Python Basics SQL CAPM PSM I

Education

Business and cybersecurity education with a risk perspective.

Information & Cybersecurity

Hochschule Luzern

Focus on cybersecurity foundations, risk, governance and security-relevant technology topics.

M.A. Business Innovation

University of St. Gallen

Research themes included privacy, information disclosure, AI, smart assistants and human-computer interaction.

B.A. Business Administration

University of St. Gallen

Foundation in strategy, organizational management, business analysis and structured problem-solving.

Contact

Open to cybersecurity, cyber risk, GRC and technology risk consulting opportunities.

Interested in roles at the intersection of cybersecurity, governance, operational resilience, regulatory risk and AI governance.