Governance, Risk and Compliance (GRC) auditor, consultant, trainer, and speaker with 29 years of experience in Information Security, Defense compliance, Export Controls & Sanctions, AI, Data Privacy, and Third-party risk management. Dr. Erdem took leadership roles in governance and compliance at Fortune 100-500 companies, SMBs, and government agencies, including:

• A-Linqs Assurance, Inc.
• Siemens Corporation
• Siemens Industry, Inc.
• Texas Instruments, Inc.
• RTrust
• ICEsoft Technologies
• NATO Command, Control, Consultation Agency (C3A) delegation
• BILGEM (Turkish National Information Security Agency)

In addition, successfully managed software development (i.e., embedded, cloud, and SaaS) and digital product projects involving information security, mobile networks, and sensor networks. Further, Dr. Erdem led several non-profit organizations, such as,

• National Association of District Export Councils (NADEC) (Chairman of Board & Advisory Board) (2014-2020)
• Government Contractors Council (Chairman) (2020-2024) and
• Central-North Florida District Export Council (Chairman of Board) (2014-2022)

Serves at and advises the

• U.S. Department of Commerce - Bureau of Industry and Security (BIS), Information Systems Technical Advisory Committee (ISTAC)
• FBI InfraGard and ISACA.

Experience and certifications include the following:

• Cybersecurity Maturity Model Certification (CMMC) Certified Professional (CCP) and Certified Lead Assessor (LCCA)
• CMMC Certified Instructor (CCI)
• Certified ISO 27001 Sr. Lead Auditor & Trainer
• Certified Information Security Manager (CISM)
• Certified Chief Information Security Officer (CCISO)
• Certified NIST Cybersecurity Implementer (CNISTI)
• Certified ISO 27701 Sr. Lead Auditor & Trainer
• Certified ISO 42001 AI MS Lead Implementer
• Certified ISO 42001 AI MS Lead Auditor
• NIST 800-171, NIST 800-53, FedRAMP
• Know Your Counterpart (KYC) compliance
• ITAR Compliance
• DFARS Compliance
• Export Control and Sanctions
• Data privacy framework (CCA, NIST DPF, GDPR)
• ISO 31000 Risk Management
• PCI DSS
• Secure Software Development
• Cryptographic/Encryption Algorithm Design
• Anti-Money Laundering Compliance
• Export Management