I help companies ship AI responsibly and reach audit readiness without slowing product delivery.

I lead the Security and AI Practice at Security Consultants. As an AI Governance and GRC consultant, vCISO, and former DPO and Privacy & Compliance Officer for global SaaS, I bridge security, privacy, product, and business.

I've led ISO 27001 from zero to certification. Today, I build practical programs for ISO/IEC 42001, EU AI Act readiness, SOC 2, and Responsible AI—from inventories and risk assessments to controls, monitoring, evidence, and audit readiness.

What matters to me is governance that works in the real world, not another shelf of documentation.

ISACA: CISM • CDPSE • AAIR | CSA: TAISE

I'm open to advisory, fractional leadership, and hands-on implementation work. If you're building or scaling AI and need credible governance, let's talk.