Bugra O.

I have gained over 20 years of professional experience in Information Security, Governance, Risk, and Compliance, while working at leading global companies such as Honda, Siemens, and Atos, and SaaS companies such as Optimum, Digilera, ODC, and cybersecurity consulting companies such as Adeo Cybersecurity, and Perseus IS Consulting. I have been certified as: ★ ISO 27001 Information Security Management System Lead Auditor ★ ISO 27701 Privacy Information Management System Lead Auditor ★ ISO 42001 Artificial Intelligence Management System Lead Auditor ★ Turkish Cybersecurity Agency Information and Communication Security Guide Lead Auditor ★ Turkish Energy Market Regulatory Authority Cybersecurity Competence Model Lead Auditor I help companies become audit-ready for ISO 27001, ISO 42001, ISO 27701, ISO 9001, and other compliance frameworks by identifying gaps, prioritizing risks, preparing documentation, and building practical certification action plans. I can support your organization with: • Gap assessment and audit readiness based on ISO 27001, ISO 27701, and ISO 42001 • ISO 27001, ISO 27701, ISO 42001 internal audits • ISMS, PIMS, AIMS documentation review and improvement • Statement of Applicability review • Information security risk assessment and treatment planning • Policy, procedure, and evidence review • Supplier security and compliance assessments • ISO 27701 Privacy Information Management System support • ISO 42001 AI Management System support • ISO 9001 quality management and process improvement • GRC framework alignment with NIST, CIS Controls, COBIT, ITIL, IEC 62443, GDPR/KVKK My approach is practical, structured, and audit-focused. I do not only prepare documents; I help organizations understand what is missing, what evidence is needed, what risks should be prioritized, and what actions are required to become audit-ready. I have professional global experience approximately 7 years in Siemens / Atos, and 3 years in Honda where ISO-based management systems, audits, process governance, and compliance activities were my core responsibilities. If you need a senior ISO/GRC professional who can combine auditor judgment, consulting experience, and practical management system implementation, I can help.