Independent consultancy for financial services & fintech
Technology risk Cyber security AI governance
Evidence-backed assessments and a remediation plan your team can actually deliver — scoped and priced before you commit.
Emre Tuncoglu
Principal Consultant. 25 years in financial-services technology audit, risk and security.
Fixed before you start
Scope, deliverables, expected input and fee — all agreed in writing first.
Experience includes
- UBS
- Aviva
- Euroclear
- Deloitte
- Lloyds Banking Group
- Capital.com
- Bupa
Services
Focused support for small teams
I work from the records you already have and only ask where evidence is missing.
-
01
Technology risk, audit & compliance
Control reviews, audit preparation and regulatory gap assessments — clear findings and a practical remediation plan.
-
02
Cyber security & security architecture
Cloud, infrastructure, access controls and designs reviewed for risk, control gaps and improvements worth making.
-
03
DORA & operational resilience
ICT-risk, third-party, incident and resilience evidence assessed against the DORA requirements that apply.
-
04
AI governance
Explore AI governance → EU AI Act assessments, plus ISO/IEC 42001 readiness and internal audit.
Approach
Assess first. Then decide.
The assessment is complete on its own. Follow-on work is optional and scoped separately.
-
Step 01
Scope
Systems, decision and criteria in scope, plus the input needed from your team.
-
Step 02
Assess
Evidence tested against the agreed criteria. Open questions stay explicit.
-
Step 03
Plan
Prioritised actions with owners, sequencing and dependencies.
-
Step 04 · Optional
Follow-on
Remediation support and re-testing against fresh evidence.
Workbench
Asked once.
Reviewed by me.
You share policies and system records once, and they're reused wherever they apply — so your team isn't asked the same question twice. Every finding links back to the evidence behind it. AI helps with drafting; applicability, findings and closures are always my call. When a finding needs a policy rewritten, AI proposes the wording one section at a time, and I accept, edit or reject each change.
AI assistance never
- Decides legal applicability
- Classifies a finding
- Closes an action
“Every engagement is delivered by me — from scope note to final walkthrough.”
Who you work with
Emre Tuncoglu — 25 years across IT audit, technology risk, security architecture and compliance, including UBS Group Internal Audit, Aviva, Euroclear, Deloitte and Capital.com.
Let's talk
priorities
Describe the challenge, the decision and any deadline. You'll get a proposed scope, the input needed and a fee before you commit.