I specialize in Cybersecurity, Information Security Audit, and GRC (Governance, Risk & Compliance). With hands-on experience as an IS Auditor and GRC Analyst, I help businesses strengthen their security posture, identify risks, development policies, procedures and stay compliant with standards like ISO/IEC 27001, SOC 2, CMMC etc.:
What I do best:
1. Risk Assessment & Threat Modeling: identify vulnerabilities and propose actionable solutions
2. IS Audit & Compliance: perform audits, gap analysis, and recommend improvements
3. Policy & Procedure Development: draft security policies, procedures, and documentation tailored to your organization
4. Technical Writing: create clear reports, guidelines, and security documentation
5. ISO 27001 Consultation and Readiness: guide organizations in preparing for audits and achieving certification
I combine strong technical knowledge with clear communication to deliver results that are both reliable and easy to understand. Whether you need a one-time audit, GAP assessment, risk assessment, or ongoing compliance support, I can help you achieve your security goals.