Advisory
I work with leadership and IT managers when security needs to become a programme: clear priorities, sustainable costs, evidence that holds up in front of an auditor, a customer or an attacker.
I What I do
01
Governance and compliance
ISO/IEC 27001 and NIS2, from gap analysis to certification: scope, risk, controls, evidence, audit readiness.
ISO 27001 · NIS2
02
Part-time security leadership
For companies without an in-house lead yet: roadmap, budget, reporting to leadership and vendors, answers to customer security questionnaires.
Leadership
03
Security vendors
Selecting and governing MDR, SOC and managed services: what to ask for, how to measure them, what to pay.
MDR · SOC
04
Technical assurance
Penetration testing of web, mobile and AI systems, with findings turned into decisions for leadership.
VAPT
05
Adoptable AI
Using generative AI at work within GDPR: policy, tooling, controls.
AI · GDPR
II How an engagement works
01
Conversation
I learn your context, obligations and constraints. No commitment.
02
Baseline
Where you stand, measured on evidence rather than self-assessment forms.
03
Plan
Priorities, costs, timing, who does what.
04
Delivery
Through to the outcome: certification, audit passed, vendor in place. And beyond, if needed.
I work hands-on. For larger engagements I bring in a network of trusted engineers through Securitix Solutions.