I am an Information Security and Identity & Access Management (IAM) professional with over a decade of experience securing enterprise systems across global environments. I specialize in simplifying complex security challenges and transforming them into scalable, people-centric processes that strengthen governance and reduce operational risk. My expertise spans application onboarding, access governance, recertifications, and audit programs aligned with ISO 27001 and NIST standards. I have designed and implemented Joiner-Mover-Leaver workflows and RBAC models that significantly reduce provisioning errors and support strong audit outcomes. I bring a proven track record of enhancing privileged access controls, maturing governance frameworks, and improving organizational audit readiness. I have also led ISO 27001-aligned audit activities, recertifications, and risk assessments delivering clear, actionable insights that help leadership strengthen security posture and compliance. Key Achievements • Designed and implemented Joiner-Mover-Leaver workflows and RBAC models that reduced provisioning errors and eliminated audit gaps • Led ISO 27001-aligned internal audits and third-party risk assessments, improving governance and compliance oversight • Automated access recertification and governance cycles, eliminating repetitive tasks and improving audit readiness • Built an ISO 27001-aligned ISMS, translating compliance requirements into actionable, sustainable security processes • Speaker/Delegate on Digital Identity and Modern IAM Governance topics Core Skills • Identity & Access Management (IAM) Governance & RBAC Design • Privileged Access Governance • Joiner-Mover-Leaver Lifecycle Management • Access Governance & Recertification • ITIL-Aligned Service Management • Risk Assessment & Third-Party Risk Management • ISO 27001 Frameworks, Controls & Audit Practices Certifications • CISM – Certified Information Security Manager • ISO 27001 Lead Implementer • ISO 27001 Lead Auditor • ITIL Service Operations • CyberArk Privilege Cloud Administrator • CyberArk Endpoint Privilege Manager (EPM) Professional Approach I approach security with a blend of technical depth and practical, business-aligned thinking. My focus is ensuring that security solutions are enforceable, understandable, and designed to support not hinder daily operations. If you’re looking for someone who can mature access and security processes while enabling the business, I would be happy to discuss how I can contribute