Willem Riehl

My name is Willem.

I help startups, SaaS companies and growing businesses turn information security, data protection and compliance into a business enabler — not a blocker.

I am an Information Security Consultant and former Director / Acting CISO with 5+ years of hands-on experience building and operating security programs in fast-moving European tech companies. I have led and supported ISO 27001, SOC 2, TISAX, Cyber Essentials, CyberVadis, supplier security, customer security reviews, risk management, business continuity, awareness, and governance initiatives.

My work is practical, business-oriented and focused on outcomes: helping you win customer trust, answer enterprise security questionnaires, prepare for audits, structure your ISMS, reduce security gaps, and make security understandable for teams and leadership.

I can support you with:

ISO 27001 readiness and implementation

SOC 2 readiness

TISAX and Cyber Essentials preparation

Security policies and ISMS documentation

Risk assessments and treatment plans

Customer security questionnaires and trust documentation

Vendor risk management

GDPR and data protection support

AI governance and practical security controls

Fractional security leadership for startups and SMEs

Through CyberPango, I focus on clear, efficient and tailored security support for companies that need senior information security expertise without hiring a full-time CISO.

My approach is simple: understand your business, identify what matters most, build what is useful, and help you move faster with customers, auditors, investors and partners.

Keywords: Information Security, Cybersecurity, ISO 27001, SOC 2, TISAX, GDPR, ISMS, Security Governance, Risk Management, Vendor Risk, Audit Readiness, CISO, Fractional CISO, Security Questionnaires, SaaS Security, Startup Security.