ISO Standards Consulting

I help organizations understand and implement international standards. Whether you need assistance with compliance, risk management, or audit preparation, I can guide you through the process.

ISO 27001, ISO 27002, ISO 22301, ISO 27005, ISO 31000, ISO 27701, ISO 20000, ISO 27032, ISO 27017, ISO 29100, ISO 27018, ISO 42201, ISO 37301

I assist organizations in developing and implementing business continuity and resilience strategies to minimize disruptions from cyber threats, disasters, or operational failures. This includes business impact analysis, continuity planning, disaster recovery , and resilience testing to ensure critical operations remain functional.

NIST, GDPR, PCI-DSS, DORA, TISAX, SOC 2 Type 2,
SWIFT CSP, SAMA Framework (KSA), ECC (KSA), CCC (KSA), NIA (Qatar), HIPPA

I help organizations understand, implement, and comply with data privacy regulations . This includes privacy risk assessments, policy development, data governance, and compliance strategies to protect sensitive information and ensure regulatory adherence.

GDRP, DORA, ISO 27701

I assist in developing and implementing information security strategies that align with business goals and regulatory requirements. This includes risk assessment, security frameworks, governance models, and long-term security planning to strengthen overall cybersecurity resilience

TOGAF, SABSA, Zachman

I help organizations identify, assess, and mitigate digital risks by developing risk management frameworks tailored to their business needs. This includes cyber risk assessments, compliance risk management, third-party risk evaluation, and incident response planning to enhance security and resilience.

ISO 31000, ISO 27005,  NIST SP 800-37, COSO

External Auditor with TÜV AUSTRIA

External Auditor with BSI

I assist organizations in preparing for external audits by reviewing security controls, policies, and compliance with industry standards. This includes gap analysis, audit readiness assessments, and remediation guidance to ensure a smooth audit process and regulatory compliance

PECB Certified Trainer, BSI Certified Trainer

I provide cybersecurity training and coaching tailored to different skill levels, from beginners to professionals. This includes awareness sessions, hands-on security practices, compliance training, and one-on-one coaching to help individuals and teams strengthen their security knowledge and skill

I offer Virtual Chief Information Security Officer (vCISO) services, providing strategic security leadership on a flexible basis. This includes developing security programs, managing risks, ensuring compliance, and guiding cybersecurity initiatives without the need for a full-time CISO

I create cybersecurity and compliance-related content, including policies, procedures, training materials, reports, and technical documentation. Whether you need clear security guidelines or educational content, I can help communicate complex topics effectively

I am available for freelance and contract-based work in cybersecurity consulting, risk management, compliance, and training. Whether you need short-term expertise or ongoing support, I can assist with security assessments, strategy development, audits, and more