10 ISO 27001 consultants
Founders or owners of their own practices, among them Inavate Consulting, Better ISMS and ISMS Boutique, account for five of these ISO 27001 consultants, and four hold or have held lead auditor or certification-body auditor titles. For a company chasing its first certificate, that mix covers scoping the ISMS, running a gap assessment and deciding how much to hand to an outside implementer.
Professionals to explore
Andy Brophy
LinkedInExperience: Principal Consultant and Co Founder · Inavate Consulting Ltd
Inavate Consulting Ltd has had Andy Brophy as Principal Consultant and Co Founder since 2013 and works with organisations in over 20 countries spanning the US, Europe, Asia and Australia. Andy was Co-Founder of Red Island Consulting (2001-2013) and has personally led over 200 implementations worldwide, a volume that makes Andy a fit for questions on how long an implementation takes and what goes wrong across many clients.
Is this you? Claim your profile and get paid for calls.
David Vitic
LinkedInExperience: InfoSec Manager & ISO 27001 Lead Auditor Founder · ISMS Boutique
ISO 27001 in 16 weeks, plus ISAE 3000, ITGC and CISO advisory for tech companies, audit firms and energy utilities, is what ISMS Boutique offers; David Vitic founded it in 2025 as InfoSec Manager & ISO 27001 Lead Auditor. David was Head of Tech-driven Audits & Assessments at Eraneos (2023-2025) and worked in Cyber & Digital Risk Consulting (2021-2022) and IT Audit Technology Assurance (2017-2021) at KPMG Switzerland. Questions on a fixed-timeline certification project suit David.
Is this you? Claim your profile and get paid for calls.
Deepak Varma
LinkedInExperience: ISO & GRC Consultant · VicByte IT Consultancy
Since 2024, Deepak Varma has been ISO & GRC Consultant at VicByte IT Consultancy, leading ISO/IEC 27001 gap assessments for SMEs ahead of certification audits and designing ISMS frameworks including risk registers, the Statement of Applicability and policies. Deepak was Assistant Manager at Tata Steel (2018-2023) and Executive at Reliance Industries Limited (2013-2017). Questions on gap assessments and Statement of Applicability work for smaller companies fit Deepak.
Is this you? Claim your profile and get paid for calls.
Lee Kelvin
LinkedInExperience: Cyber Security Consultant ISO27001 ISO27701 ISO22301 IEC62443 · KPMG Taiwan
Lee Kelvin has been Cyber Security Consultant ISO27001 ISO27701 ISO22301 IEC62443 at KPMG Taiwan since 2023, covering ISMS planning and implementation, personal data management system work and coaching customers through ISO 27001 third party verification. Lee was Security Consultant Manager at BCCS (2019-2023) and IT Section Manager at FOXCONN EMEA (2002-2008). With ISO27701, ISO22301 and IEC62443 in the same title, Lee suits questions on certifying ISO 27001 alongside those standards.
Is this you? Claim your profile and get paid for calls.
Paulo Alexandre Porfirio
LinkedInExperience: President · ISO Consulting LLC
Paulo Alexandre Porfirio has been President of ISO Consulting LLC since 2011, and held ISO 27001 Qualified Lead Auditor (2009-2012), BSI ISO 27001 qualified Tutor at BSI (2009-2012) and Information Security Consultant Auditor at Criterselect (2009-2012). Paulo cites 50+ ISO 27001 implementations and 1585+ international audit days. Having taught and audited the standard, Paulo suits questions on what certification auditors look for.
Is this you? Claim your profile and get paid for calls.
Paulo Buijs
LinkedInExperience: Senior GRC & Information Security Consultant vCISO ISO 27001 Lead Implementer · Security Consultants Ltd (OU)
Paulo Buijs is Senior GRC & Information Security Consultant vCISO ISO 27001 Lead Implementer at Security Consultants Ltd (OU), since 2025, and founder of Security Office Online since 2021. Paulo was Cybersecurity & ISO 27001 Consultant at Copilex (2024-2025) and Senior ISO 27001 Project Manager & Consultant at b-next AG (2022-2024), and lists CISM, SOC 2, DORA and NIS2 alongside freelance work in the EU. Paulo fits questions on running ISO 27001 next to SOC 2, DORA and NIS2.
Is this you? Claim your profile and get paid for calls.
Shane Feeney
LinkedInExperience: Senior Information Security Consultant · Cemax Consulting
Keeping certification costs down and mapping ISO 27001 to Australian government requirements are the questions for Shane Feeney, Senior Information Security Consultant at Cemax Consulting since 2010, helping companies attain ISO27001 certification and advising on implementing best practices economically. Shane has implemented several ISMS and guided companies to ISO27001, and lists ISO/IEC 27001, NIST 800-53 and 800-171, the Au Govt ISM and Right Fit For Risk (RFFR) as areas of expertise.
Is this you? Claim your profile and get paid for calls.
Stuart Rowson
LinkedInExperience: ISO 27001 Consultant · Wolf Info Sec Limited
Self-employed since 2022 as ISO 27001 Consultant at Wolf Info Sec Limited, Stuart Rowson works as an ISO 27001 auditor, implementer and consultant with clients in the engineering and IT service industry. Stuart has also been Audit Associate at NQA since 2025 and was Associate Auditor (2022-2025) and Client Manager (2019-2022) at BM TRADA Certification. Working on both the consulting and certification-body sides makes Stuart useful for questions on preparing for the audit itself.
Is this you? Claim your profile and get paid for calls.
Tristan Roth
LinkedInExperience: Founder - ISO 27001 consultant and lead auditor · Better ISMS
Better ISMS was founded by Tristan Roth in 2023 as ISO 27001 consultant and lead auditor, supporting companies and startups in certification projects and providing outsourced internal audits, and since 2024 Tristan has also been Founder - Product, GRC and Security engineering at ISMS Copilot. As ISO 27001 manager and Risk Management specialist at Kantox (2022-2025), Tristan built the ISMS and the enterprise risk management program. Ask Tristan about building an ISMS from the inside as an in-house ISO 27001 manager.
Is this you? Claim your profile and get paid for calls.
Youri Biesmans
LinkedInExperience: Information Security Consultant ISO 27001 Implementation Coach · Toreon
Information Security Consultant ISO 27001 Implementation Coach at Toreon since 2014, Youri Biesmans has also owned BS Consulting BV since 2011 and has been Information Security Consultant at Ministerie van Defensie since 2020. Youri was Information Security Consultant at the Ministry of Foreign Affairs Belgium (2014-2020) and describes the work as CISO, ISO 27001 implementation coach and ISO 27001 internal auditor. Questions on coaching an internal team through implementation in government settings fit Youri.
Is this you? Claim your profile and get paid for calls.
Choose the right perspective
Andy Brophy (over 200 implementations) and Paulo Alexandre Porfirio (50+ implementations) cite the most projects, while Deepak Varma and Lee Kelvin describe gap assessments, ISMS design and coaching clients through third-party verification. If you also need SOC 2, DORA or NIS2, Paulo Buijs names those, and Tristan Roth, David Vitic and Stuart Rowson pair consulting with lead auditor or auditor titles, useful for an outside view of what an audit will check.
Questions to take into the conversation
- 01How do you scope an ISMS for a first ISO 27001 certificate so it satisfies auditors without covering every system on day one?
- 02Which gaps show up most often in a first readiness assessment, and which of them would stop a Stage 1 audit?
- 03When is it worth combining ISO 27001 with SOC 2, NIS2 or DORA work instead of running them as separate projects?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.