By Alex Fernandez
🛡️ Turning compliance into measurable business value through structured leadership.
Only two months after joining the company, I was assigned to lead the full ISO 27001 certification process — despite it being my first time managing an external audit of this magnitude. The previous year, under different leadership, the company had faced several nonconformities and significant external consulting costs.
I approached the challenge with a structured methodology: rebuilding the SGSI documentation from the ground up, aligning every Annex A control, and establishing a clear task distribution and follow-up system. Each department was assigned measurable responsibilities, with weekly check-ins, internal audits, and evidence tracking.
Through disciplined project execution, cross-department collaboration, and full alignment with ISO 27001, we achieved a flawless external audit with zero nonconformities — a result never reached before in the company.
This success also generated a significant financial impact. By earning my ISO 27001 Internal Auditor and Lead Auditor certifications, I fully internalized the audit process, eliminating the need for outsourced auditors and saving the organization thousands of euros every year.
Additionally, having no nonconformities meant that departments avoided weeks of corrective rework and resource loss — translating into substantial time and cost savings across all teams.
This achievement proved my ability to lead complex compliance initiatives under pressure, structure large-scale projects effectively, and deliver measurable business value in a remarkably short period.