Sara S.

I help startups, SMEs, and growing enterprises build practical cybersecurity and compliance programs that strengthen security, improve customer trust, and prepare organizations for successful audits. With hands-on experience in **ISO/IEC 27001 implementation, IT and Information Security audits, Governance, Risk & Compliance (GRC), and cybersecurity risk management**, I have worked with organizations across banking, fintech, SaaS, and technology sectors to develop effective Information Security Management Systems (ISMS), conduct internal audits, perform risk assessments, and achieve audit readiness. ### What I can help you with: * ISO/IEC 27001 implementation, gap assessments, and certification readiness * Internal Information Security & IT audits * ISMS documentation (Policies, Procedures, Risk Register, Statement of Applicability) * Governance, Risk & Compliance (GRC) program development * Cybersecurity risk assessments and risk treatment planning * NIST CSF and Saudi NCA Cybersecurity Framework assessments * Regulatory compliance reviews and security control implementation * Audit preparation and corrective action management * Security awareness documentation and compliance support ### Professional Experience I have worked with organizations including: elunic AG (Germany) – Supporting ISO/IEC 27001:2022 implementation, risk assessments, ISMS documentation, internal audits, and certification readiness. Falconry Solutions – Delivering GRC consulting, ISO 27001 implementation, NCA framework assessments, and cybersecurity advisory services for clients in Saudi Arabia. HBL Microfinance Bank – Conducting IT and Information Security audits aligned with SBP ETGRM, ISO 27001, NIST CSF, and COBIT. Risk Associates – Performing ISO 27001 audits, compliance assessments, and advisory engagements for financial and technology organizations. ### My Approach I believe compliance should support business growth—not slow it down. My focus is on building security programs that are practical, risk-based, and aligned with business objectives while remaining fully audit-ready. Whether you need help preparing for ISO 27001 certification, improving your security governance, conducting an internal audit, or strengthening your compliance posture, I can provide structured guidance and hands-on support throughout the engagement. Let's discuss your compliance goals, current challenges, and project timeline to build a solution that fits your business.