At Amdari, I used ISO 27005 to establish a cybersecurity risk management framework for a fintech client, defining risk assessment criteria and treatment workflows. I also develop ISO 27001-aligned governance materials and map regulatory obligations to technical controls using the NIST RMF.
At Westpay Global Resources, I built an ISO 27001-aligned ISMS from scratch across two financial technology applications, including the Statement of Applicability, nine security policies, and 14 procedures. I assessed controls, reported findings to leadership, and verified remediation.
At Cyberpack HQ, I lead security considerations and risk assessments for bespoke software projects, and coach developers on secure coding and threat identification. My engagements have included email security governance and an Essential Eight maturity assessment for an Australian client.

