AI Governance and information security that survives contact with reality.
AI Governance, IT & Information Security Consultant. Incident Response Manager and Senior Program & Project Manager with 30+ years across regulated sectors — turning NIS2, DORA, ISO 27001/42001 and the EU AI Act into operational reality.
A senior hand for regulated complexity.
For more than 30 years, the person organisations turn to when they need to untangle mixed signals and simplify confusing processes. Global experience in IT program and project management, with a strong passion for compliance, strategy, risk and security — delivering measurable results across both public and private sectors.
Specialised in identifying improvement opportunities and aligning security and compliance initiatives with commercial objectives. Recent focus expanded to AI Governance, Risk and Compliance (AI GRC) — ensuring responsible and ethical AI deployment alongside NIS2, DORA and IT/OT (IEC 62443) work in regulated industries.
A dozen disciplines, one operating system.
Frameworks, standards and methodologies routinely deployed across client engagements.
Four decades, one through-line: trust at scale.
- 2016 — PresentSweden · FounderTriple z Management ABFounder & Owner — Risknavigator™ & AI Risknavigator™
- Strategic consultancy platforms for Information Security, Data Protection and AI Governance, Risk & Compliance.
- Registered trademarks underpinning long-term advisory engagements across regulated sectors.
- Aug 2025 — PresentStockholm & ReykjavikSyndis (via IT-Säkerhetsbolaget)Compliance & Security Consultant
- NIS2 / Cybersäkerhetslagen: GAP and risk analyses across OT, IT and IAM; roadmap and compliance tracker for important and essential entities.
- DORA advisory and gap assessments for financial sector clients.
- Designing incident and reporting procedures, policies and guidelines aligned with ISO 27001 and NIS2.
- Building Integrated Management Systems (IMS) on ISO 27001 and ISO 9001, adapted for DORA requirements.
- vCISO (CISO-as-a-Service) and external DPO across multiple clients.
- AI GRC advisory — interaction with traditional information security and data protection frameworks.
- Sep 2020 — Jul 2025StockholmAtea Sverige ABChief Consultant Security, AI & Information Security · IRT Lead
- Built Atea Sweden's national Incident Response Team from the ground up — recruited and onboarded 15 specialists.
- Designed the strategic and operational IR framework with NIS2-aligned mandatory reporting timelines and coordinated vulnerability disclosure.
- Authored the internal GTM playbook for IR services: pricing models, service tiers, value messaging.
- NIS2 planning, gap assessments and implementation for public sector, municipalities, utilities (energy & water) and IT/OT manufacturers.
- ISO/IEC 27001 ISMS advisory and GAP/risk assessments.
- Sep 2019 — Apr 2020StockholmASSA ABLOY ABData Protection / GDPR Specialist — global HRIS rollout across 70+ countries.
- Oct 2017 — Aug 2020StockholmAhlsell ABSenior PM EU GDPR Strategy · Interim CISO · Data Protection Manager
- Jan 2017 — Jun 2018GlobalHusqvarna GroupInformation Security Consultant & Global EU GDPR Program Manager
- 2012 — Aug 2016AmsterdamSandvik Mining & Rock TechnologyStrategic IT Programs · IT/OT & Supply Chain · PMO Lead
- 2010 — 2012SwedenSandvik IT Global Shared ServicesSenior Project Manager — global IT programs (Agile & PROPS)
Education & certifications.
Have an AI GRC, NIS2, DORA or information security challenge?
Engagements range from short advisory sprints and gap analyses to multi-year program leadership and vCISO mandates.