As a risk management consultant, I provide comprehensive services to help organizations identify, evaluate, and mitigate risks associated with various aspects of their operations. My expertise includes assessing risks related to artificial intelligence solutions, software development, financial, operational, compliance, cybersecurity, and reputational.
I can lead cross-functional teams to identify and quantify risks associated with strategic plans, software development, product launches, and contracts. I design and evaluate risk models to support decision-making processes and treat uncertainty in planning, budgeting, contracting, software design, and cybersecurity operations. My work is guided by international standards such as ISO 31000, 310022, and 23894.
I work closely with organizations to execute annual risk and decision-making support plans that address business competition, vulnerability trends, and emerging needs. I also drive and oversee insurance and control solutions, ensuring compliance with various regulations and requirements such as FCPA, OFAC, FAR, GDPR, CCPA, and others.
I facilitate and test the alignment of tasks and controls with policies and obligations while updating and creating new procedures and training. I also perform due diligence on potential and current third parties, including background checks, internal investigations, attestations, and certificates.
My services include managing audit and control readiness programs to certify SOX controls, information security, privacy, software development, and data management activities. I help organizations collect and prevent losses, incidents, and near-misses through root-cause analysis.
I design and implement business processes to ensure commitment to risk management and ESG targets, particularly those related to the confidentiality, integrity, and availability of video solutions, internal systems, and data. I also promote risk awareness across business managers as a trusted business partner for risk and planning matters.
My expertise includes assessing information security, cybersecurity, cloud services, and IT risks and controls against industry best practices such as ISO 27001, 27002, 27017, 27701, 27031, 37301, 37001, NIST 800-53, NIST 800-30, ISF Standard of Good Practice, PCI DSS, COBIT, ITIL, SOC 1, and 2. I also facilitate risk assessments for IT assets based on the ISF Information Risk Assessment Methodology 2 (IRAM2).
I report risks, emerging risks, incidents, and audit observations to top management levels. I translate security and business requirements and risk responses into technical designs and controls. I deliver ongoing training and cyber risk maturity development tools. I work with IT operators, architects, engineers, and top managers in the identification and management of risks and compliance and legal requirements.