Tom S.

Fractional CISO | Security Governance & GRC | ISO 27001 | NIS2 | AI Governance

I help organisations strengthen security governance, build practical ISO 27001-aligned ISMS, prepare for NIS2, and establish responsible AI governance.

• Location: Tromsø, Norway
• Availability: Open to projects
• Day rate: €1,550
• Hourly rate: €210
• Languages: English, Norwegian, Swedish, Danish

About

Security and digital governance leader with hands-on experience building and operating security, compliance and AI governance in regulated environments. My work sits at the intersection of cybersecurity, GRC, digital transformation and executive advisory.

I work across ISO/IEC 27001, information security risk management, NIS2 readiness, AI governance, cloud security, identity and security governance.

I have led the development and operationalisation of an ISMS in an ISO 13485 and GMP-regulated life sciences environment, combining governance, risk, asset management, security controls and compliance requirements into practical operating models.

Certified ISO/IEC 27001 Lead Implementer and ISO/IEC 27005 Risk Manager, with a Microsoft AI Engineer Associate certification and practical experience leading AI adoption and governance initiatives.

Open to selective fractional CISO, interim security leadership and advisory engagements across Europe, primarily remote or hybrid.

Specialisms

• security-architecture
• grc-compliance
• cloud-security

Skills

• ISO 27001
• Risk Management
• NIS2
• Governance
• vCISO
• Internal Audit
• Third-Party Risk
• Policy Writing
• GDPR
• Azure Security
• az
• AZ-500
• Identity Architecture
• Zero Trust Architecture
• Zero Trust
• Security Architecture
• Information Security Governance
• Cybersecurity Governance
• GRC
• Information Security Management
• ISMS
• ISO/IEC 27001
• ISO/IEC 27005
• Information Security Risk Assessment

Services offered

• I will act as your Fractional CISO / vCISO — Senior security leadership, governance and risk support without the need for a full-time CISO.
• I will assess your security governance and ISO 27001 readiness — A practical gap assessment with clear priorities and an actionable improvement roadmap. (€3,500)

Heelr is the cybersecurity services marketplace by Cyberr. Compare verified providers, agree scope and pay through protected payments.

View this on Heelr · Browse cybersecurity services