Colette P.

I’m a cybersecurity and compliance leader with more than 20 years of experience in technology, including 15+ years focused on information security, risk, privacy, and regulatory compliance. I work with startups, SaaS companies, fintech organizations, and small to mid-sized businesses that need experienced security leadership without necessarily hiring a full-time CISO. My areas of expertise include: • Virtual CISO (vCISO) and strategic security advisory services • Cybersecurity program development and security maturity assessments • ISO 27001/SOC2 readiness, implementation, audit preparation, and certification support • PCI DSS, GDPR, CCPA, HIPAA/HITECH, and privacy compliance • Security policies, standards, procedures, Privacy Policies, and Terms of Use • Risk assessments and third-party/vendor security reviews • Penetration testing program management and remediation oversight • Incident response planning and process improvement • Security and compliance support for engineering and operations teams • Audit preparation, evidence collection, gap analysis, and remediation planning I’ve led security in growing organizations, managed global security teams, worked directly with executive leadership, engineering, and operations, and helped translate security and compliance requirements into practical controls that businesses can actually implement. My background includes previously held CISSP, CCISO, CEH, CHFI, and Project+ certifications, as well as an LLB awarded with First Class Honours in September of 2026. Whether you need fractional security leadership, help preparing for an audit or certification, an independent assessment of your security program, or someone who can work alongside your technical team to implement remediation, I can help you move the project forward without unnecessary complexity. I focus on practical, risk-based security, understanding what matters, identifying what needs to change, and helping organizations get it done.