Tom S.
Tromsø, Norway · Fractional CISO | GRC & Security Governance | ISO 27001 | NIS2 | AI Governance · ArcticZymes Technologies ASA
UiT The Arctic University of Norway
1 follower
About
Security and digital governance leader with hands-on experience building and operating security, compliance and AI governance in regulated environments. My work sits at the intersection of cybersecurity, GRC, digital transformation and executive advisory.
I work across ISO/IEC 27001, information security risk management, NIS2 readiness, AI governance, cloud security, identity and security governance. I have led the development and operationalisation of an ISMS in an ISO 13485 and GMP-regulated life sciences environment, combining governance, risk, asset management, security controls and compliance requirements into practical operating models.
Certified ISO/IEC 27001 Lead Implementer and ISO/IEC 27005 Risk Manager, with a Microsoft AI Engineer Associate certification and practical experience leading AI adoption and governance initiatives.
Open to selective fractional CISO, interim security leadership and advisory engagements across Europe, primarily remote or hybrid.
Specialties
- CISO / Security Leadership
- ISO 27001
- Regulatory Compliance
- Risk Management
- Security Governance
Skills
- Information Security Governance
- Cybersecurity Governance
- GRC
- Information Security Management
- ISMS
- ISO/IEC 27001
- ISO/IEC 27005
- Risk Management
- Information Security Risk Assessment
- Regulatory Compliance
30 skills in total
Licenses & Certifications
-
ISO 27005 Risk Manager
PECB
Issued Mar 2026 · Expires Mar 2029
-
ISO 27001 Lead Implementer
Various (PECB, BSI, TÜV)
Issued Oct 2025 · Expires Oct 2028
-
Certified in Cybersecurity
ISC²
Issued Feb 2024 · Expires Jan 2027
Experience
-
IT Manager
ArcticZymes Technologies ASA
Sep 2023 — Present
Tromsø, Norway
-
CIO / IT Manager
Norway Royal Salmon ASA
Sep 2020 — Sep 2023
Tromsø, Norway
-
Consulting Manager / Business Developer
Atea AS
Feb 2012 — Aug 2020
Tromsø, Norway
4 experiences in total
Education
-
UiT The Arctic University of Norway
University Studies / Continuing Education, Cybersecurity, Risk & Societal Security
Aug 2026
-
BI Norwegian Business School
Continuing Education, Management & Leadership
Aug 2017 — Jun 2019
3 education entries in total
Recent posts
[celebration:new_certification]Has successfully verified **ISO 27001 Lead Implementer** (Various (PECB, BSI and 2 more certifications