Fotini Tsiatoma currently serves as a Cyber Risk Manager at GSK, where she leverages her extensive expertise in Information Security and Risk Management to safeguard the organization’s digital assets. With over 20 years of experience, primarily in the financial industry, Fotini brings a wealth of...
Fotini Tsiatoma currently serves as a Cyber Risk Manager at GSK, where she leverages her extensive expertise in Information Security and Risk Management to safeguard the organization’s digital assets. With over 20 years of experience, primarily in the financial industry, Fotini brings a wealth of knowledge to her role as the Business Information Security Officer for various business units, including Commercial, Global Functions, and Research & Development. Her responsibilities encompass providing a comprehensive view of GSK's cybersecurity posture, utilizing defined Key Risk Indicators (KRIs) to assess and mitigate potential threats effectively.
In her role, Fotini is instrumental in driving compliance with GSK's cybersecurity strategy and governance programs. She ensures that all business units align with established policies and procedures, fostering a culture of security awareness and resilience. Her proficiency in incident management and penetration testing enhances the organization's ability to respond to and recover from cyber threats swiftly. As a Certified Information Security Manager (CISM), she is adept at navigating the complexities of ISO 27001 standards, ensuring that GSK not only meets but exceeds compliance requirements.
Fotini’s leadership skills are evident in her ability to manage global teams, delivering high-quality security services and compliance programs tailored to the unique needs of each business unit. Her clarity in communication, both written and verbal, allows her to articulate complex security concepts to stakeholders at all levels, ensuring a shared understanding of risks and responsibilities. Through her strategic vision and hands-on approach, Fotini Tsiatoma continues to enhance GSK's cybersecurity framework, positioning the organization to thrive in an increasingly complex digital landscape.
