I will act as your virtual ciso, grc and iso 27001 consultant


About this gig
Is your security program held together by hope and a spreadsheet? I fix that.
I am a Canadian cybersecurity consultant with 20+ years in IT and security operations. Led an organization through full ISO 27001 and PCI-DSS certification, zero non-conformities.
What you get in this consultation:
- A structured gap assessment of your current GRC / ISO 27001 posture
- A prioritized findings report: what's broken, what's critical, what can wait
- A practical remediation roadmap mapped to ISO 27001 Annex A controls
- Guidance on policies, risk registers, statements of applicability, and audit readiness
- Clear, plain-language answers your leadership team will actually understand
Who this is for:
- Companies preparing for ISO 27001 certification or surveillance audits
- Teams with no dedicated CISO who need senior-level security direction and roadmap
- Businesses that must demonstrate compliance to win contracts
Why me:
- 26+ years hands-on IT and cybersecurity operations (SOC, pentesting, governance)
- Led an organization to ISO 27001 certification with zero non-conformities
- I speak plain English and Arabic not consultant word salad
Message me first with a short description
Get to know Hesham T
Cybersecurity Hiring Manager
- FromKuwait
- Member sinceSep 2026
Languages
English, Arabic
FAQ
Do you work with companies outside Kuwait?
Yes. Consultations are delivered remotely by video call and written report, in English or Arabic, for clients anywhere.
Can you help us pass an ISO 27001 audit?
Yes. I prepare the gap assessment, roadmap and documentation so you walk into the certification or surveillance audit ready.
What do you need from me before we start?
A short description of your business, systems and current security documents. I will confirm scope before you order.
Do you only do ISO 27001?
No. I cover wider GRC: risk assessments, policy frameworks, vendor risk and audit readiness against other frameworks on request.

