Skip to main content

Consulting Services

Navigate the complex world of cybersecurity and regulatory compliance with expert guidance.

Practical Governance for Security, Risk and AI

Consulting That Turns Requirements into Action

I help organizations strengthen information security, improve governance and compliance, and build practical frameworks for managing technology and AI-related risks.

My approach combines standards, regulation, risk management and real-world implementation — translating complex requirements into clear structures, actionable controls and sustainable governance practices.


I support organizations in designing, implementing and improving Information Security Management Systems aligned with ISO/IEC 27001.

Support may include gap assessments, risk and control frameworks, policy development, Statement of Applicability, remediation planning, internal audit preparation and continual improvement.

I help organizations establish practical AI governance frameworks and AI Management Systems aligned with ISO/IEC 42001 and evolving regulatory expectations.

This includes governance structures, AI risk management, policies, roles and responsibilities, lifecycle controls, documentation and implementation support.

I support organizations in translating regulatory requirements into practical governance structures, responsibilities, controls and evidence.

The focus is on readiness, gap identification, implementation planning and sustainable compliance with frameworks such as NIS2 and the EU AI Act.

I help organizations strengthen governance, risk and compliance practices through structured risk assessments, control frameworks, compliance mapping and management reporting.

Support can also include third-party risk, evidence management, remediation tracking and alignment of risk decisions with business priorities.

I provide flexible security leadership and advisory support for organizations that need senior-level guidance without necessarily requiring a full-time security executive.

This can include security strategy, governance oversight, management reporting, stakeholder coordination, risk-based decision support and alignment between business and security priorities.

I support organizations in preparing for internal and external audits by identifying gaps, strengthening control evidence and improving overall audit readiness.

Support can include internal audit preparation, evidence reviews, remediation planning, management review support and certification readiness for relevant management systems and compliance frameworks.

Ready to Strengthen Your Security and Governance?

Whether you need implementation support, regulatory readiness, risk management or strategic security advisory, I’d be glad to explore how I can support your organization.