Philip Jr F.

Cybersecurity GRC Consultant | ISO 27001 | ISO 27701 | ISO 42001 | SOC 2 I help startups, SaaS companies, healthcare organizations, and enterprises build audit-ready cybersecurity, GRC, privacy, and AI governance programs—from gap assessment and implementation to audit and certification readiness. I’m a **Cybersecurity GRC Consultant and Head of Cybersecurity Managed Services** with 7+ years of experience across cybersecurity, information security, IT audit, risk management, and compliance. **My core services include:** • ISO/IEC 27001 ISMS Implementation, Gap Assessment & Audit Readiness • ISO/IEC 27701 Privacy Management & Privacy Compliance • ISO/IEC 42001 AI Governance & AI Management Systems • SOC 2 Readiness & Security Control Assessments • Cybersecurity Risk & Control Assessments • Security Policies, Procedures & ISMS Documentation • Third-Party / Vendor Security Risk Assessments • Cloud Security Assessments — AWS, Azure & Google Cloud • GDPR, HIPAA & Philippine Data Privacy Act Support • Internal Audits, Remediation & Certification Preparation • AI Security, AI Risk Assessments & Responsible AI Governance • GRC Platform Support — Vanta, Scrut, Drata & RSA Archer **Certifications & Credentials:** ISO/IEC 27001:2022 ISMS Lead Auditor | ISO/IEC 27701:2025 PIMS Lead Auditor | ISO/IEC 42001:2023 AIMS Lead Implementer | IRCA ISMS Associate Auditor | CQI Practitioner My approach is practical and business-focused. I don't just identify compliance gaps—I help you understand **what needs to be fixed, why it matters, and how to get it audit-ready.** Whether you're starting an ISO certification journey, preparing for an audit, responding to customer security requirements, or strengthening an existing security program, I can help. **Have a cybersecurity, GRC, privacy, or compliance challenge? Let's discuss it.**