As a Risk and Compliance Manager, I oversee the implementation and maintenance of the information security and risk management framework, policies, and procedures for the company. I have more than 13 years of experience in the IT security industry, with a strong background in ISO standards, risk reporting and control, and industry best practices.I hold multiple certifications in information security, risk management, and privacy, including CISM, CRISC, CPEGP, ISO 27001 Lead Auditor, ISO 31000 Risk Management, and DSCI Certified Privacy Professional. I am passionate about helping organizations achieve their business objectives while ensuring compliance with regulatory and ethical requirements.