Headshot Jan Circle

Jan Santos

Governance & Digital Risk Manager 

Jan is a CISSP and CISA certified governance and digital risk professional with more than ten years of audit and advisory experience, and a newly certified ISO/IEC 42001 Lead Implementer who helps organisations prepare for and integrate an AI management system (AIMS). 

Jan Santos: Governance and Digital Risk Manager, AI Governance and Information Security

Jan Santos is Governance and Digital Risk Manager at CG Business Consulting (CGBC) in Dublin, Ireland. He has more than ten years’ experience in IT risk, audit and advisory, and helps organisations build secure, compliant and well-governed management systems.

What standards and regulations does Jan Santos specialise in?

Jan specialises in ISO/IEC 27001 implementation and audit, and has recently gained his ISO/IEC 42001 Lead Implementer certification. He also advises on System and Organisation Controls (SOC 1 & 2), NIS Directive, DORA, GDPR, AI act through leading frameworks such as NIST CSF, COBIT, COSO and ITIL. 

How does Jan help businesses with AI governance and ISO 42001?

Jan supports organisations that want to implement an AI management system (AIMS), from readiness assessments to integration with their existing management systems. His ISO 42001 Lead Implementer certification builds on his work in governance, risk and management systems.

What is Jan’s professional background?

Jan has worked in leading professional services across IT risk, cybersecurity and controls advisory, supporting senior leadership, audit committees and technical teams. He is also a Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA) and ISO/IEC 27001 Lead Auditor. 

Who does Jan work with?

Jan delivered professional solutions and support from SMEs to multi-national companies on industry sectors such as financial services, manufacturing, technology, retail and distribution, healthcare, telecommunications and logistics. He provides targeted guidance that aligns with the expectations of each group, from top‑level management to early‑career professionals. 

Qualifications

  • ISO/IEC 42001 Lead Implementer
  • ISO/IEC 27001 Lead Auditor (PECB, 2026)
  • Certified Information Systems Security Professional (CISSP, ISC2, 2024)
  • Certified Information Systems Auditor (CISA, ISACA, 2015)
  • Certified in Cybersecurity (CC, ISC2, 2024)
  • Google Cloud Digital Leader (2024)
  • Certificate on Artificial Intelligence (ICDL Ireland, 2024)

Whether you are advancing your AI governance strategy or fortifying your information security environment, CGBC can help. Contact Jan and our Dublin‑based experts to discuss solutions that meet the highest professional standards. Contact CGBC - HERE .