I am an experienced Information Security Consultant and Cybersecurity & GRC Expert with over 12 years of hands-on experience in security auditing, Risk Management, vulnerability assessments, penetration testing, identity & access management, and compliance with international standards such as ISO27001.
I hold multiple industry-recognized certifications including CISSP, ISO/IEC 27001 Lead Implementer, eWPTXv2, eCPPTv2, and CCNP, which reflect both my governance and technical expertise. Throughout my career at Telecom and IT companies, and as part of the Synack Red Team and other online platforms, I have successfully:
• Managed internal audits and risk assessments processes, and proposed mitigation actions.
• Conducted penetration testing and vulnerability management for large-scale systems.
• Supported organizations in achieving and maintaining compliance with frameworks such as ISO27001, and other security standards.
• Led identity and access management programs for thousands of users.
• Drivied security awareness programs and advising on prevention of human-related breaches