Catalin S.

Skilled Information Security and IT /IS Audit professional with extensive experience in risk management, governance, and compliance. With over 17 years in the field — including 10 years in IT/IS audit and the past 7 years focused on information security governance & compliance — I bring a practical, risk-driven perspective to strengthening organizational security and regulatory alignment. I am a CISA, CISM, and ISO/IEC 27001 Lead Implementer certified professional with hands-on experience conducting ISO 27001 audits and implementing security frameworks across multiple sectors, from corporate consulting environments to internal audit functions within established organizations. My work consistently ensures adherence to global standards while delivering measurable improvements to security posture. My core expertise includes: * ISO 27001 implementation, maintenance, and internal audits * Security governance and compliance strategy * Security policy and procedure development * IT audit and control evaluation * Virtual CISO (vCISO) advisory services * Third-party security reviews and questionnaire handling * Mapping and implementing controls across standards and frameworks I have contributed to multiple ISO 27001 implementation and maintenance engagements and delivered numerous internal audits — including 15+ ISO 27k audits in 2025 alone — while supporting certified organizations in strengthening their compliance and security maturity. My combined audit and security background enables me to take a holistic view of IT and information security processes, balancing regulatory expectations with operational practicality. If you’re looking for a trusted partner to support compliance initiatives, audit readiness, governance improvements, or security program development, I would be happy to discuss how I can help.