I’m a Cybersecurity Governance, Risk & Compliance (GRC) Specialist with over 5 years of hands-on experience implementing ISO 27001-aligned information security programs and strengthening enterprise risk and compliance posture across diverse industries.

I specialize in policy governance, risk management, internal audits, and data protection, helping organizations maintain secure, audit-ready environments aligned with frameworks such as NIST RMF, SOC 2, and GDPR.

At Thina Entertainment, I led the development of the organization’s Information Security Management System (ISMS), authored over a dozen governance and security policies, and conducted internal audits and risk assessments to maintain continuous improvement and control maturity. My work bridged creative operations and secure information governance, ensuring compliance, resilience, and digital asset protection.

Currently, I consult as an Independent GRC Practitioner, delivering ISO 27001 gap assessments, preparing Statements of Applicability, managing risk registers, and developing policy suites that embed security-by-design into daily operations.

Key Competencies

-Information Security Governance & Policy Development
-Risk Assessment, Treatment & Mitigation
-Internal Audits & Compliance Monitoring
-Data Protection & Privacy Management
-ISO 27001 Implementation & Audit Readiness
-Vendor & Third-Party Risk Management
-Security Awareness & Compliance Training