Hire the Best Compliance Consultants
in the Philippines

✅ Certified Cybersecurity Professional Specialized in Governance, Risk, and Compliance (GRC). Certified and experienced in protecting businesses from cyber threats. ISO/IEC 27001:2022 Lead Auditor 🔎 Expertise in Risk Assessment & Security Audits Conducting comprehensive risk assessments to identify vulnerabilities. Performing audits to ensure adherence to industry standards. 📜 Compliance with Global Standards Proficient in ISO 27001, ISO 42001, HIPAA, GDPR, and NIST CSF frameworks. Ensuring organizations meet regulatory requirements with ease. 📈 Building Cybersecurity Awareness Designing and delivering tailored security awareness programs. Collaborating with stakeholders to strengthen security culture. 🛠 Proficient in Key Tools Experienced with industry-leading tools like KnowBe4, Auditboard, Vanta, LogicGate, Jira, ClickUp, Google Workspace, and Microsoft 365, enabling efficient risk management and compliance tracking. 🚀 Let’s Work Together I provide tailored solutions to safeguard your assets and elevate your cybersecurity strategy.

Aside from doing Information Security and Compliance related works, I'm also constantly working on my marketing and sales skills. As you can see in my previous Upwork completed jobs, I specialized in ECommerce and business to business deals. I also do end-to-end sales processes, generating leads, drafting marking emails, and newsletters, and if needed I can also landing pages.

Cybersecurity GRC Consultant | ISO 27001 | ISO 27701 | ISO 42001 | SOC 2 I help startups, SaaS companies, healthcare organizations, and enterprises build audit-ready cybersecurity, GRC, privacy, and AI governance programs—from gap assessment and implementation to audit and certification readiness. I’m a **Cybersecurity GRC Consultant and Head of Cybersecurity Managed Services** with 7+ years of experience across cybersecurity, information security, IT audit, risk management, and compliance. **My core services include:** • ISO/IEC 27001 ISMS Implementation, Gap Assessment & Audit Readiness • ISO/IEC 27701 Privacy Management & Privacy Compliance • ISO/IEC 42001 AI Governance & AI Management Systems • SOC 2 Readiness & Security Control Assessments • Cybersecurity Risk & Control Assessments • Security Policies, Procedures & ISMS Documentation • Third-Party / Vendor Security Risk Assessments • Cloud Security Assessments — AWS, Azure & Google Cloud • GDPR, HIPAA & Philippine Data Privacy Act Support • Internal Audits, Remediation & Certification Preparation • AI Security, AI Risk Assessments & Responsible AI Governance • GRC Platform Support — Vanta, Scrut, Drata & RSA Archer **Certifications & Credentials:** ISO/IEC 27001:2022 ISMS Lead Auditor | ISO/IEC 27701:2025 PIMS Lead Auditor | ISO/IEC 42001:2023 AIMS Lead Implementer | IRCA ISMS Associate Auditor | CQI Practitioner My approach is practical and business-focused. I don't just identify compliance gaps—I help you understand **what needs to be fixed, why it matters, and how to get it audit-ready.** Whether you're starting an ISO certification journey, preparing for an audit, responding to customer security requirements, or strengthening an existing security program, I can help. **Have a cybersecurity, GRC, privacy, or compliance challenge? Let's discuss it.**

Want to scale up your business and optimize your processes for increased productivity? Are you looking for a Process Expert to write your procedures/SOPs? or need a helping hand improving your processes? Find no more! Let's talk. Interested in helping companies achieve its goals through Continual Improvement in order to exceed customer satisfaction. Proficient in developing systems, processes, procedures and forms in compliance to ISO 9001, ISO 14001, ISO 45001, ISO 13485 etc I have a good track record in addressing process gaps by implementing actions to reduce costs, streamline operations, and improve results—effective team leader who excels in motivating and organizing teams for efficient performance. EXPERTISE: MANAGEMENT SYSTEM DEVELOPMENT ★ ISO Certification Planning, Consultancy and Support ★ Creation of QMS process documentation, SOP and Forms to comply with ISO13485 & ISO9001, ISO 14001 & 45001 etc ★ Conduct QMS review to determine the level of compliance with ISO13485 & ISO9001, ISO 14001 & 45001 etc. ★ Remote internal & supplier auditing ★ Risk management TRAINING ★ Development of Courses /Training Materials ★ Internet / Web Research STRATEGY, MANAGEMENT & PROCESS IMPROVEMENTS ★ Trained in Project Management (PMBOK) ★ Value Stream Mapping, KPI Development ★ Process Design, Analysis and Improvement (Lean and Six Sigma, TQM) *TALENT BACKGROUND*: ★ Industrial Engineer ★ MBA Specialized in Productivity and Quality Management ★ Certified Lean Six Sigma Green Belt ★ Certified Internal Auditor (ISO 9001, ISO 13485, ISO 45001) ★ Computer literate with proficiency in MS Visio, Lucid Chart, 4TQ, Drawing Io, Microsoft Office 365 (Word, Excel, Powerpoint, Outlook, SharePoint, OneNote, One Drive, MS Forms, MS Planner, MS Stream) ★ Good verbal and written communication skills ★ Ability to work individually or as part of a team - has a strong work ethic with proven leadership skills ★ Critical and strategic thinker ★ With good time management skills and able to work under pressure ★ Can learn fast and work efficiently ★ has advanced knowledge in quality management, supply chain, manufacturing and project management I would like to discuss further with you about your project and how we can work together to achieve results.

A highly skilled and detail-oriented professional with Big 4 experience specializing in ISO 9001 and ISO 27001 standards, with extensive experience in managing and implementing robust quality management systems (QMS) and information security management systems (ISMS). Proficient in conducting comprehensive internal audits to ensure compliance with industry standards and organizational policies. Key Expertise: - ISO 9001: Expertise in developing, maintaining, and improving quality management systems (QMS), ensuring efficient processes and continuous improvement. - ISO 27001: Strong proficiency in implementing ISMS frameworks to protect sensitive information, manage security risks, and achieve compliance with regulatory requirements. - Internal Audits: Conducts thorough internal audits for both ISO 9001 and ISO 27001, identifying gaps and non-conformities, and developing actionable remediation plans to improve compliance and effectiveness. - Risk Management: Skilled in assessing risks, creating mitigation strategies, and enhancing overall security posture. - Continuous Improvement: Actively promotes continuous improvement initiatives to enhance operational efficiency, security, and quality outcomes.

An IT audit (internal & external) professional expert in ITGC/GITC and ITAC testing, infrastructure reviews (OS & DB), SOx Compliance Testing, SOC 1, 2 and 3 and their gap assessments, comprehensive in IT processes (Access, Change & IT Operations) and FAIT engagements.