06/16/2026 updated
100 % available
CYBER SECURITY GOVERNANCE, RISK & COMPLIANCE EXPERT
Kai Iwi, New Zealand
Only remote
Master of Digital Business; Bachelor of Computing SystemsAbout me
Risk, assurance, governance, and cybersecurity professional with over thirteen years of experience across consulting, government, utilities, financial services, technology, and critical infrastructure environments in New Zealand and Germany.
Certified Information Systems Security ProfessionalCertified Information Security ManagerComplianceCertified in Risk and Information Systems ControlGovernance Risk Management and ComplianceISO/IEC 27000ISO/IEC 27000-SeriesCertified Information Systems AuditorIT General Controls (ITGC)Digital ComplianceSecurity Consultancy
IT security, cyber security, information security, IT audit, ITGCs, ISO27001, NZISM, NIST CSF
Experience
Professional experience5 - 10 years
Freelancer since2021
Languages
GermanNative speakerEnglishFluent
Project history
• Led cybersecurity, risk, governance, and assurance engagements across government, health, financial services, utilities, and private sector organisations.
• Enabled organisations to successfully achieve audit, certification, and assurance outcomes through risk-based control improvements and remediation programmes.
• Delivered cybersecurity maturity assessments that informed executive and Board investment decisions, including the establishment and expansion of cybersecurity functions.
• Strengthened organisational resilience through governance frameworks, security policies, risk management processes, and security uplift initiatives.
• Provided trusted advisory services to executives and stakeholders, translating complex cyber and technology risks into practical business outcomes.
• Increased organisational cybersecurity maturity through governance, risk, and compliance programmes.
• Enabled executive and Board oversight through strategic cyber risk reporting, threat intelligence briefings, and assurance activities.
• Reduced third-party and cloud risk through vendor assurance and monitoring processes.
• Led security awareness, policy, and assurance initiatives that strengthened compliance and organisational resilience.
• Delivered security assurance, Certification and Accreditation (C&A), and compliance activities across government and commercial environments.
• Supported compliance outcomes across NZISM, NIST, PCI DSS, SOC 2, and ISO/IEC 27001 frameworks.
• Enabled organisations to embed security by design into technology initiatives and operations.
• Acted as a trusted advisor, influencing security strategy, governance, and risk-based decision-making.