I am a professional specializing in Information Security Governance, Risk, and Compliance, dedicated to assisting organizations in adhering to various information security standards, frameworks, and regulations.I have successfully implemented, audited, and achieved ISO 27001 certifications and SOC 2 reports in collaboration with CPAs for multiple organizations in New Zealand and Australia. My expertise includes the implementation, operation, and auditing of ISO 27001 and SOC 2. Additionally, I am confident in my ability to implement and audit ISO 27701 PIMS, ISO 31000 Risk, ISO 42001 AI, PCI-DSS, CIS, NIST, and regulatory compliance frameworks such as NZISM, Essential 8, NZ PSR, GDPR, and various Privacy Acts.I am certified as an IRCA UK ISO 27001:2013 and 2022 Lead Auditor, as well as an ISO 27701 Lead Auditor.Prior to my focus on GRC, I spent over 15 years in technology, working in systems and network administration and hold certifications such as CEH, MCITP, Linux, Cyber Ark, Qualys etc.