I am an Information Security and Governance, Risk, and Compliance (GRC) specialist with strong experience in designing, implementing, and managing security frameworks aligned with international standards such as ISO/IEC 27001:2022.

I support organizations in building structured and secure environments by conducting risk assessments, performing comprehensive gap assessments, and guiding businesses through certification processes. I specialize in documentation development, including but not limited to policies, standards, guidelines, and information security processes tailored to organizational needs.

I provide end-to-end consultancy support, from identifying compliance gaps to leading gap remediation efforts, including corrective action planning and implementation. My work ensures that organizations not only achieve compliance but also establish practical and sustainable security practices.

I have hands-on experience working with financial institutions, fintechs, and corporate environments, helping them align with regulatory requirements while strengthening their overall security posture. I also assist in translating complex security requirements into practical, business-focused solutions that improve operational efficiency.

My expertise includes Informaton security controls implementation, Information Security frameworks gap assessment, risk management, audit support, security governance, access control reviews, and continuous improvement of security controls to ensure resilience against evolving threats.