How I can help
Cybersecurity consulting, policy writing, identity and access design, and remote management of your identity, devices and cloud apps, delivered as defined projects, monthly plans or B2B contracts. Every engagement has an agreed scope, clear deliverables, and is delivered by me personally.
Know where you stand
A plain-language review of your security, measured against the NIST Cybersecurity Framework 2.0. You get an honest picture of what’s in place, what’s missing, and what to fix first.
- Interviews with leadership, operations and whoever runs your IT today
- Review of identity and access, devices, network, backups, vendors and existing policies
- Scored gap report with risks ranked by impact and effort
- A 90-day action plan your team can follow, with or without me
- A walkthrough of the findings with your leadership
Policies people will actually follow
Insurers, auditors, customers and investors increasingly ask for a written security program. I write one around how your organization really operates, then help you put it into practice.
- A tailored set of 10 to 12 policies: access control, acceptable use, passwords and MFA, data retention, vendor management, incident response, device use and more
- An AI use policy: which AI tools staff may use, for what, and what information must never go into them
- Written in plain English for the people who have to follow them, not for auditors
- Rollout support: staff acknowledgment, a short training session and a leadership briefing
- Mapped to NIST CSF 2.0, so you can show which outcomes each policy supports
When something specific needs doing
Fixed-scope projects, quoted after a short scoping call. Available on their own or alongside any plan.
IAM workflow design
Joiner, mover and leaver workflows designed end to end: who approves access, how it is granted, reviewed and removed, with MFA and admin accounts under control.
Incident readiness
A written incident-response plan, a contact tree, and a tabletop exercise with your leadership team, so everyone knows what to do on the worst day.
Vendor, app and AI tool review
A review of the services and AI tools that hold or see your data, with a simple approval process for new ones going forward.
Managed identity, device and SaaS security
For organizations without a dedicated IT team, or with a small one that needs security expertise. I run the day-to-day administration of your identity, devices and cloud apps remotely, with security built in from day one and a written report every month.
- Google Workspace or Microsoft 365 administration: accounts, groups, licenses, sharing and retention
- MFA and single sign-on enforced across every account
- Joiners, movers and leavers handled end to end, with access reviews and audit evidence
- Managed endpoint protection (EDR), with alert triage and escalation
- Cloud backup of email and files, with restore tests
- Remote UniFi and Meraki configuration: firewall, segmentation, IDS/IPS and VPN
- Security review of new SaaS and AI apps before staff rely on them
Ongoing support, by arrangement
After a project, some clients want continuity: someone to keep policies current, review new tools and vendors, and help with insurer, auditor or customer security questions. I offer this as a defined monthly scope or as a B2B contract, agreed in writing.
- Policy upkeep as your organization and its tools change
- Reviews of new apps, vendors and AI tools before staff rely on them
- Periodic access reviews against your IAM workflows
- Support with security questionnaires from insurers, auditors and customers
- Regular written reporting for owners and leadership
Common questions
Who will I actually work with?
Me. I lead every engagement personally, from the first call to the final report. For specialist work, I can bring in vetted specialists under the same NDA.
Can you manage our IT?
Yes, remotely, for the identity, device and cloud side: accounts, MFA, joiners and leavers, endpoint protection, backups and network configuration. I don’t do on-site visits or hardware repair. If you already have an IT provider, I can work alongside them instead, set the security standard they work to, and check that it’s met.
Where are you based?
In southern Chile. I work with clients remotely, in English or Spanish, with meeting times arranged to suit both sides. My company, ProCiber SpA, is set up for project-based engagements and B2B contracts.
Can you help with AI governance and compliance?
Yes. There is no single AI certification to aim for, but customers, insurers and regulators increasingly expect organizations to show how they control AI use. Staff are already using AI tools for writing, research and admin, often without guidance. I write a clear AI use policy, review the AI tools in use against how they handle your data, and give staff simple rules they’ll remember. The work draws on the NIST AI Risk Management Framework, and it’s included in the policy program and ongoing support rather than sold separately. To see where you stand, take the free AI security check.
How do engagements work?
After a free 30-minute call, I send a short written proposal with the scope, deliverables, timeline and fee. Work starts once it is agreed, and an NDA can be signed first.
Will you sign an NDA?
Yes, before any discovery work starts. Just ask, and I’ll send one, or sign yours.