CISA Certified • LL.M. • Audit & Compliance Leader

Institutional Regulatory Compliance & Independent Audit Services

Specialized internal audits, DORA & NIS2 operational resilience frameworks, and inspection-ready governance across EU & UK jurisdictions.

Direct Audit, Compliance Oversight & Inspection Defense Experience

Paynetics
FXCM
Trading 212
Payhawk
Rakuten Viber

Specialized Consulting Services

Tailored risk, compliance, and cyber-resilience audits designed for Electronic Money Institutions (EMIs), fintechs, and investment firms.

Core Assurance

Internal Audit Services

Comprehensive, risk-focused internal audit engagements aligned with EU and UK regulatory mandates (AMLD, MiFID II, PSD2, DORA, NIS2).

  • Financial Crime: KYC/CDD, BWRA, transaction monitoring, periodic monitoring/KYC refresh, and SAR/STR reporting.
  • Data Protection: DPIA, ROPA, DSARs, DPAs, data breach register, data purging, and regulatory breach notification processes.
  • Complaint Handling: Acknowledgement & final resolution, supporting processes and registry, external UK FOS/Cyprus Ombudsman case management.
  • Third Party Risk Management & Outsourcing: Registry of third parties, function criticality, risk assessment and due diligence, ongoing monitoring and exit strategies.
  • Full Audit Lifecycle: Formal audit report delivery, executive presentations, and systematic remediation tracking to full closure.
Operational Resilience

DORA Readiness Assessments

Strategic alignment with the Digital Operational Resilience Act (EU 2022/2554) to ensure robust ICT operational governance.

  • ICT Control Gap Analysis: Deep-dive assessment against DORA standards and oversight requirements.
  • Register of Information: Architecting and compiling the contractual register for ICT third-party service providers.
  • BCP / DR Audit: Targeted evaluation of business continuity and disaster recovery test evidence.
  • Policy & Control Creation: Designing tailored ICT risk management policies, SLA metrics, and supplier audit rights.
Cybersecurity Directive

NIS2 Readiness Assessments

Structured evaluations for essential and important entities to bridge cyber risk management and national incident-reporting standards.

  • Governance & Supply Chain: Rigorous gap analysis of downstream supply chain security and IT management accountability.
  • Incident Handling Workflows: Control design for mandatory incident notifications to regulatory bodies.
  • Policy & Control Creation: Drafting dedicated NIS2 compliant frameworks and documents.
Independent Authority

The Team Behind ClearAssure Partners

Internal Audit Leadership | CISA | Master of Laws (LL.M.)

An experienced team of internal audit and compliance leaders with over a decade of track record across Tier-1 financial institutions and high-growth fintechs.

10+
Years in EU & UK regulated compliance and audit

Throughout their careers at Paynetics and Forex Capital Markets (FXCM), the team behind ClearAssure Partners has designed and executed multi-domain annual audit strategies covering AML/CTF, operational resilience, and complex regulatory compliance across the EU and UK.

Our work involves direct strategic advisory to Risk Committees and audit reviews across prominent market leaders including Trading 212, Rakuten Viber, and Payhawk.

Combining Master's-level legal expertise with ISACA’s Certified Information Systems Auditor (CISA) designation, we specialize in bridging the gap between technical IT controls, regulatory obligations, and automated compliance solutions.

Engagement & Pricing

Every regulated entity operates under a unique risk profile, operational footprint, and licensing perimeter. Engagements are tailored based on scope, technical complexity, and target timelines.

  • Preliminary Scoping: Defined based on entity scale, regulatory jurisdiction (EU/UK), and existing documentation maturity.
  • Transparent Scope of Work: Clear milestone-based quotes for gap assessments, policy creation, or end-to-end internal audit engagements.
  • No Hidden Retainers: Comprehensive deliverables including formal reports, remediation schedules, and committee-ready presentations.

Request an Offer

Fill out the parameters below to receive a scoped commercial proposal.