I am a dedicated Information Security Consultant with a robust track record in helping organizations build, implement, and govern secure IT environments. Over the past 20 years, I have led and contributed to numerous projects focusing on information security, governance, and compliance. My areas of specialization include ISO/IEC 27001 and GDPR compliance, Identity and Access Management (IAM), and Privileged Access Management (PAM). I am adept at developing structured security frameworks that safeguard data integrity, enhance resilience, and support operational continuity.

Throughout my career, I have transitioned from a technical developer to a trusted advisor and project lead, working with a variety of sectors to achieve high-security standards tailored to each organization’s unique needs. My skill in aligning business requirements with IT capabilities allows me to bridge the gap between compliance and business objectives, ensuring that security strategies are not just policies on paper but implemented and maintained as integral parts of daily operations.

In recent projects, I have served as IT Continuity Architect, where I assisted in developing system recovery protocols and governance models driven by ISO 27001 and NIS2 requirements. I led the implementation of the National Standard for Identity Assurance Levels (NSIS) based on ISO 27001, and I contributed to an enterprise-wide CyberArk deployment for privileged access governance. My approach is methodical and client-focused, leveraging tools like BPMN, workshop facilitation, and structured project management to create clear pathways from strategy to execution.

My goal is to enable organizations to meet regulatory and operational demands confidently. With a focus on resilience, compliance, and proactive risk management, I help build IT infrastructures that not only protect critical data but also drive business efficiency and growth. I look forward to connecting with professionals and organizations looking to elevate their information security posture.