10/29/2026 updated
100 % available
Cyber Compliance & Governance Specialist | NIS2 | ISMS | Control Assurance
Blentarp, Sweden
Worldwide
B.Sc. Computer Science, Dedan Kimathi University of Technology, Kenya, 2012About me
Cybersecurity & GRC Programme Manager specialising in EU NIS2 compliance, cybersecurity governance, ISMS implementation and operationalisation, and control assurance. Experienced in leading cross-functional programs across Europe, with a growing focus on AI governance and regulatory compliance.
Compliance TrainingGovernance Risk Management and ComplianceCyber-physical SystemsCyber Threat Analysis
I specialise in cybersecurity programme management, Governance, Risk and Compliance (GRC), and regulatory compliance, helping organisations translate complex cybersecurity requirements into practical, measurable and sustainable outcomes.
Core Skills & Expertise
- Cybersecurity Programme & Project Management: Leading complex, cross-functional cybersecurity programmes, coordinating stakeholders, managing risks, budgets, dependencies, governance forums and delivery milestones.
- Information Security Management Systems (ISMS): Supporting ISMS implementation, maturity improvement, control mapping, evidence management and the transition from compliance assessments to business-as-usual operations.
- Regulatory & Compliance Management: Translating regulatory obligations into actionable requirements, mapping responsibilities across central functions and local legal entities, and developing traceable evidence of compliance.
- Stakeholder & Executive Management: Facilitating discussions with senior leadership, legal, risk, IT, information security and business teams. Communicating complex technical and regulatory topics in clear business language to support informed decisions.
- Risk-Based Delivery & Reporting: Developing compliance dashboards, RAG status reports, management presentations, action trackers and governance documentation to improve transparency, accountability and decision-making.
- Cross-Functional & International Collaboration: Coordinating distributed teams and stakeholders across European jurisdictions, aligning central policies and controls with local regulatory requirements and business realities.
- Agile & Portfolio Delivery: Applying structured project governance, roadmap planning, milestone tracking and collaborative delivery practices to manage complex initiatives.
Emerging Specialisation: AI Governance & Security
Building on my cybersecurity GRC background, I am expanding my expertise in AI governance, AI security, the EU AI Act, model risk management and data protection, with a focus on integrating responsible AI practices into existing governance and risk-management frameworks.
Professional Approach
I combine structured programme delivery with a practical, risk-based mindset. My focus is on turning regulatory requirements into clear ownership, implementable controls, measurable progress and sustainable business processes—not just achieving compliance on paper.
Experience
Professional experience10+ years
Freelancer since2015
Languages
EnglishFluent
Project history
Supporting Tetra Pak's European NIS2 programme, coordinating cybersecurity programme activities across multiple European countries, legal entities and business stakeholders. Translating NIS2 obligations into implementation plans, deliverables and remediation activities. Supporting ISMS implementation and operationalisation, stakeholder engagement, governance discussions and management reporting.
Coordinated cybersecurity project activities and supported integration of security and compliance requirements into product development. Conducted gap assessments, supported asset inventories, contributed to risk-based security testing, prepared technical and compliance documentation, and delivered user awareness training on information governance and compliance in a complex industrial environment.
Developed technical documentation, whitepapers, datasheets and cybersecurity-related content to support compliance. Translated complex encryption and security concepts into accessible material for different audiences and supported technical knowledge-sharing within the organisation.