Hire the Best Risk Assessment Freelancers
in the Philippines

PROFILE Results-oriented professional with over three years of expertise in risk assessment, fraud detection, compliance, and Enhanced Due Diligence (EDD). Adept at analyzing complex transactions to ensure regulatory compliance and uphold high standards. Known for exceptional customer service, meticulous attention to detail, and strong problem-solving abilities that drive customer satisfaction. A proactive communicator, skilled at collaborating across teams, resolving issues with precision, and consistently achieving business objectives while maintaining the highest levels of compliance and integrity.

I bring a diverse background in internal auditing and administrative operations across manufacturing, trading, aviation, education, and health sectors. With a strong track record of delivering internal audits aligned with international standards, I help clients achieve and maintain compliance while improving their operational efficiency and risk posture. Certifications: ✅ ISO 9001:2015 Quality Management Systems Lead Auditor Exemplar Global Competency Units: TL, AU, QM Issued by Global Compliance Certification (GCC) ✅ Operational Hazard Identification and Risk Mitigation Course Issued by Singapore Aviation Academy, International Civil Aviation Regulation (ICAO) Course Code: 201/146/SMS HIRM | May 7–10, 2018 ✅ Core Competencies -Internal Auditing & Compliance (ISO 9001, ISO 14001, NDIS, SMS, Civil Aviation Regulation, EduTrust) -Risk Management -Policy & Procedure Development -Templates and Forms Creation -Documentation & Audit Preparation ✅ SOFT SKILLS ✓ Results-oriented ✓ Deliver projects as planned ✓ Organize ✓ Fast learner ✓ Resourceful ✓ Determined ✓ Can work with less supervision ✅ TECHNICAL SKILLS: 1. In-depth knowledge of: - Quality Management System (ISO 9001) - Safety Management System (SMS, ICAO) - Environmental Management System (ISO 14001) - National Disability Insurance Scheme (NDIS, Australia) - Philippine Civil Aviation Regulations - EduTrust (Singapore) Can develop documents such as but not limited to the following: a. Manuals - Quality Management System Manual - Safety Management System Manual (Safety Policy and Objectives, Safety Risk Management, Safety Assurance and Safety Promotion) - Basic Operating Manual b. Policies and Procedures - Corporate Governance and Strategic Planning - Recruitment and Deployment - Employee Training and Development - Business Travel and Expense - Procurement of Goods and Services - Supplier Accreditation and Qualification - Internal Audit Management - Document and Records Management - Auditors Evaluation - Continual Improvement - Safety Incident and Accident Reporting - Hazard Identification and Risk Assessment c. Forms/Templates/Checklists - Attendance Sheet - SL/VL - Liquidation - Reimbursement - Inventory Sheet - Purchase Request - Delivery Receipt - Purchase Order - Invoice - Employee Personal Data - Incident/Accident Report - Hazard Identification Report - Hazard Assessment - Corrective and Preventive Action - Audit Notification - Audit Yearly Schedule - Audit Checklist 2. In-depth knowledge of MS Office Word, Excel, and PowerPoint 3. Can convert MS Office files to PDF or vice-versa 4. Knowledgeable in the use of Google Apps such as Google Drive, Calendar, Meet, Maps, Gmail, Docs, Sheets, and Forms) 5. Knowledgeable in the use of Canva (editing and posting it on Social Media) 6. Email Management (Outlook, Gmail, Yahoo) 7. Knowledgeable on the use of project management software (Click-up, Asana, Mondaycom, Hubspot, Sweet Process, CRM, Podio)

Experienced Information Security Officer skilled Data Analytics, Information Security Governance, Third Party Risk Management & Assessment, Security Policy Development & Enforcement, Incident Response & Management, Security Controls Design & Implementation, Security Awareness and Training Programs Compliance & Regulatory Alignment (e.g., ISO/IEC 27001, NIST, GDPR, HIPAA).

I help businesses stay audit-ready and compliant with ISO 27001, SOC 2, and IT quality standards. With 8+ years in cybersecurity, compliance, and process improvement, I streamline documentation, manage risk, and support seamless audits. Let’s strengthen your compliance framework and keep your systems secure and efficient.

✅ Certified Cybersecurity Professional Specialized in Governance, Risk, and Compliance (GRC). Certified and experienced in protecting businesses from cyber threats. ISO/IEC 27001:2022 Lead Auditor 🔎 Expertise in Risk Assessment & Security Audits Conducting comprehensive risk assessments to identify vulnerabilities. Performing audits to ensure adherence to industry standards. 📜 Compliance with Global Standards Proficient in ISO 27001, ISO 42001, HIPAA, GDPR, and NIST CSF frameworks. Ensuring organizations meet regulatory requirements with ease. 📈 Building Cybersecurity Awareness Designing and delivering tailored security awareness programs. Collaborating with stakeholders to strengthen security culture. 🛠 Proficient in Key Tools Experienced with industry-leading tools like KnowBe4, Auditboard, Vanta, LogicGate, Jira, ClickUp, Google Workspace, and Microsoft 365, enabling efficient risk management and compliance tracking. 🚀 Let’s Work Together I provide tailored solutions to safeguard your assets and elevate your cybersecurity strategy.

I help organisations turn security, risk, and compliance requirements into practical, audit-ready programmes that work in the real world. With 20+ years in information security, governance, and risk management, including a background in secure military communications, I bring a structured and pragmatic approach to complex security and compliance challenges. My focus is not just on meeting framework requirements, but on helping teams prioritise the improvements that reduce risk, support the business, and stand up to audit scrutiny. I regularly support clients with: ▪ ISO/IEC 27001:2022 ISMS implementation and certification readiness. ▪ SOC 2 readiness and control alignment. ▪ ISO/IEC 42001:2023 AI management system implementation. ▪ ISO/IEC 27701, GDPR, NIS 2, DORA, HIPAA, PCI DSS 4.0, CMMC, and NIST-aligned programmes. ▪ Security posture reviews, risk assessments, and control gap analysis. ▪ Prioritising remediation activity based on risk, business impact, and operational constraints. ▪ Policy development, incident response planning, business continuity, and awareness programmes. ▪ Drata configuration, evidence automation, control monitoring, and audit preparation. As a Drata Technical Certified consultant, I help clients configure compliance tooling so it supports the way they actually operate. This includes mapping controls across frameworks, automating evidence collection, tracking risks and tasks, and giving leadership a clearer view of readiness and exposure. Recent work includes: ▪ Leading a full ISO/IEC 27001:2022 implementation for a SaaS provider, achieving certification with zero nonconformities or Opportunities for Improvement (OFIs). ▪ Delivering risk assessment, business impact analysis, and a full policy suite for a US MSP, with ongoing work around training and awareness. ▪ Leading a dual ISO/IEC 27001:2022 and ISO/IEC 42001:2023 implementation in Drata for a global compliance firm, including AI risk and impact assessment. ▪ Supporting an Australian SaaS firm with ISO/IEC 27001:2022 ISMS implementation. ▪ Supporting security and compliance programmes where the priority is translating complex requirements into clear, actionable improvements. My approach is practical and outcome-focused. I help teams understand what needs attention first, why it matters, and how to move from intent to implementation without unnecessary complexity. That includes prioritising remediation activity based on risk, business impact, operational constraints, and the realities of how the organisation works. Clients usually come to me when they need: ▪ Clear, structured, audit-ready delivery. ▪ Practical implementation rather than theoretical advice. ▪ Help prioritising security and compliance improvements. ▪ Strong hands-on experience with Drata and GRC tooling. ▪ Someone who can work comfortably with technical, operational, and leadership teams. If you need an experienced partner to help build, improve, or prioritise your security and compliance programme, I can help.