Bridging law, business, and technology in Cyber Security. The unexpected path of Ivana Butorac

Ivana Butorac: GRC Manager Belgium & Group Compliance Leader, Sopra Steria Cyber Security 

I initially hadn’t thought of working in cyber security.  

Back in Croatia, I wanted to become a public prosecutor. But life has a funny way of connecting the dots. My legal background, moving to Belgium, gaining international experience and sheer curiosity about the digital world ended up leading me somewhere completely unexpected and honestly, incredibly exciting. 

I kicked off my career with roles at the European Parliament and later Cisco Systems. That’s where I first got intrigued by cyber security. Breaking into the field wasn’t easy, especially with a legal profile, but I enrolled at KU Leuven for ICT law combining work during the day and studies in the evenings. The effort and commitment eventually landed me a junior role in data protection at Sopra Steria. 

Fast forward 4.5 years, and here I am: GRC Manager, leading the GRC team of 15+ within the Cyber Security business line in Belgium. I also serve as Group Compliance Leader, helping shape and drive the Compliance National Practice across the Sopra Steria Cyber Security Group globally. 

What I love most about my role is that it brings together three things I’m passionate about: law, business, and technology. People often see compliance as a roadblock, but to me, it’s a powerful business advantage. We support clients through complex regulations like GDPR, NIS2 and the AI Act, ensuring they’re not just compliant, but confidently secure. 

Beyond my day-to-day routine, I’m proud to be active in the wider cyber security community. In 2024 alone, I gave eight keynote talks across Europe. I’ve been nominated for Young ICT Lady of the Year, and I’m committed to mentoring young professionals looking to find their own path into this space. 

Some of my proudest moments? Working on EU-level projects that strengthen public safety like improving the Schengen System and sBMS. Knowing that our work helps protect millions of people across Europe? That’s what drives me. 

Sopra Steria has played a huge part in my growth. The trust, the multicultural vibe, the freedom to lead and shape your own path it’s all here. We’re encouraged to speak up, take initiative, and challenge the status quo. And that makes a world of difference.