Vadym

Vadym Pavlov
GRC & Risk Specialist
Email [open contact info](look above in the "contact info" section)
Phone: [open contact info](look above in the "contact info" section)

Summary
GRC & Risk specialist transitioning from Product Operations, with experience in
cross-functional collaboration, business process documentation, change management,
operational impact assessment and stakeholder communication.
Professional training across Governance, Enterprise & Operational Risk Management,
Compliance, Internal Audit, Internal Controls and Cybersecurity fundamentals. Interested in
GRC, Risk, Internal Audit, Internal Controls and Technology/Digital Risk roles.

Business Skills
● Risk Assessment & Analysis
● Business Process Analysis
● Process & Control Documentation
● Stakeholder Management
● Cross-functional Collaboration
● Change Management

Tools
● Microsoft Office
● Google Workspace
● Notion
● Jira
● Confluence

Languages
● Ukrainian - Native
● English - B2 (Upper-Intermediate)
Work experience
April 2025 - May 2026 - Product Operations Manager at Fidel Group

Projects:
Description:
International regulated consumer digital platform.

Responsibilities
● Coordinated cross-functional projects across Product, Development, QA and
Design teams.
● Analysed business requirements and operational impact before feature
implementation.
● Participated in release planning, change implementation and cross-functional
change management.
● Worked within documented business processes, approval workflows and
process specifications.
● Maintained traceable documentation supporting business and product
decisions.
● Monitored and analysed KPIs to support data-driven decision-making.
● Coordinated stakeholders to align implementation with business objectives and
requirements.
● Designed and coordinated customer engagement initiatives supporting business
objectives.

Core Competencies
● Governance, Risk & Compliance (GRC)
● Enterprise & Operational Risk
● Risk Assessment
● Compliance Management
● Internal Audit
● Internal Controls
● Cyber & Information Security Risk
● Business Process Analysis
● Process & Control Documentation
● Stakeholder Management
● Cross-functional Collaboration
● Analytical Thinking

Professional Knowledge

Governance, Risk & Compliance

● Corporate Governance, GRC and Compliance Management
● Enterprise & Operational Risk Management
● Risk Identification, Assessment, Treatment and Monitoring
● Risk Appetite, Risk Tolerance, Inherent & Residual Risk
● Compliance Management Systems, Policies and Regulatory Controls
● Three Lines Model and organisational risk oversight
● Familiarity with ISO 31000 and COSO ERM

Internal Audit & Controls

● Internal Audit principles, independence and assurance
● Risk-Based Audit Planning and Audit Execution
● Audit Evidence, Documentation, Findings and Reporting
● Internal Control Design and Effectiveness Assessment
● Preventive, Detective and Corrective Controls
● Fraud Risk and Professional Scepticism

Information Security & Cyber Risk

● Cybersecurity and Information Security Fundamentals
● CIA Triad and Defense in Depth
● Cyber Threats, Vulnerabilities and Risk Concepts
● Identity, Authentication and Access Control Fundamentals
● Vulnerability and Patch Management
● Incident Response and Security Monitoring
● Malware, Phishing, Social Engineering and common attack vectors
● Familiarity with NIST Cybersecurity Framework

Legal & Professional Foundations

● Business Law fundamentals: Contract, Tort, Agency, Corporate and Employment Law
● Professional Business Writing and stakeholder-oriented communication
● Evidence-based and defensible professional documentation

Courses & Professional Training
● Internal Auditing Essentials for Business Success
● Toolkit for Cybersecurity Professionals: Cybersecurity Fundamentals
● Business Communication - Fundamentals of Business Writing
● Operational Risk Management
● Fundamentals of Governance, Risk and Compliance (GRC)
● Corporate Governance
● Basics of Compliance Management

Education

Kharkiv National University of Radio Electronics

Bachelor’s Degree in System Engineering | 2017–2022