About Shola Hassan

I’m a Calgary-based cybersecurity GRC consultant working across information security governance, privacy, third-party risk and AI governance. I help organizations turn broad requirements into clear ownership, workable controls, evidence and decisions leaders can act on.

​

My background combines business management and vendor-facing work with cybersecurity training and applied GRC engagements. I start by understanding the business process, then identify the risks that matter and recommend steps teams can implement and maintain.

​

My portfolio includes third-party risk assessments and workflows, security and privacy governance in digital health, policy and evidence development, and control mapping for ISO 27001, SOC 2 and PCI DSS readiness. Each case study identifies whether the work was a client practicum, professional engagement or independent project.

​

How I work

1. Scope the business question, systems, stakeholders and requirements.
2. Review processes, controls and evidence.
3. Prioritize gaps with owners and practical next steps.
4. Present a roadmap and support implementation or readiness follow-up as agreed.

​

Credentials
 

Governance & Management

CISM - ISACA (verify on Credly)

​

Management-System Auditing

ISO/IEC 27001:2022 Lead Auditor — Mastermind (verify on Credly)

ISO/IEC 27701:2025 Lead Auditor — Mastermind (verify on Credly)

ISO/IEC 42001:2023 Lead Auditor — Mastermind (verify on Credly)

​

Technical Security

CompTIA CySA+ · CompTIA Security+ · ISC2 CC

​

Payment Security

CPSP v2.0