Advise clients on EU and international compliance (DORA, ISO 27001, NIS2, GDPR, SOC 2), perform gap analyses and risk assessments, guide control implementation and evidence collection, prepare clients for audits/regulatory inspections, produce GRC documentation, monitor regulatory changes, and deliver training and workshops.

Lead regulatory resilience for AI and operational resilience by implementing EU AI Act and DORA controls. Manage AI model classification, conformity assessments, third-party ICT risk, TLPT and BCP exercises, algorithmic audits, and act as primary regulator liaison to ensure compliance and operational anti-fragility.