I will act as your virtual ciso, grc and iso 27001 consultant

H
hishamft
H
hishamft
Hesham T

About this gig

Is your security program held together by hope and a spreadsheet? I fix that.


I am a Canadian cybersecurity consultant with 20+ years in IT and security operations. Led an organization through full ISO 27001 and PCI-DSS certification, zero non-conformities.


What you get in this consultation:

- A structured gap assessment of your current GRC / ISO 27001 posture

- A prioritized findings report: what's broken, what's critical, what can wait

- A practical remediation roadmap mapped to ISO 27001 Annex A controls

- Guidance on policies, risk registers, statements of applicability, and audit readiness

- Clear, plain-language answers your leadership team will actually understand


Who this is for:

- Companies preparing for ISO 27001 certification or surveillance audits

- Teams with no dedicated CISO who need senior-level security direction and roadmap

- Businesses that must demonstrate compliance to win contracts


Why me:

- 26+ years hands-on IT and cybersecurity operations (SOC, pentesting, governance)

- Led an organization to ISO 27001 certification with zero non-conformities

- I speak plain English and Arabic not consultant word salad


Message me first with a short description

Get to know Hesham T

Hesham T

Cybersecurity Hiring Manager

  • FromKuwait
  • Member sinceSep 2026
  • Languages

    English, Arabic
Cybersecurity leader with 20+ years delivering security programs across banking, telecom, and government. Dual expertise in project management and security leadership — combining technical knowledge and operations with executive governance. I've Led SOC and GRC programs, achieving ISO 27001 certification with zero non-conformities. I've sat on both sides of the table — interviewing and hiring. I write resumes that get past ATS, coach interviews from the hiring-panel side, and give cert guidance as a holder (CISSP, CISM, CEH, ISO 27001 LA, PMP).