I'm Calvin Louw — a Senior Digital Risk Consultant helping organisations across finance, insurance, manufacturing and technology design and operationalise Third Party Risk, Information Security and Privacy programmes.
For over six years I've helped enterprises design, implement and optimise risk management programmes — translating regulatory pressure and emerging threats into pragmatic controls that the business can actually live with.
My focus is at the intersection of Third Party Risk, Information Security and Privacy — where I lead managed service teams, configure platforms like Phinity and UpGuard end-to-end, and help clients move from one-off assessments to continuous, automated risk operations.
I'm currently based in Johannesburg, presenting at industry events such as ITWeb on emerging topics including AI in TPRM, and certified across CISM, SSCP, CC, ITIL 4, ISO 27001 and ISO 31000.
End-to-end TPRM frameworks across governance, operations and tooling — from policy design through to managed service delivery using Phinity and UpGuard.
Practical security controls aligned to ISO 27001 and broader cybersecurity frameworks — with a focus on enabling, not blocking, the business.
Privacy remediation programmes that move organisations from paper compliance to operationalised data protection across the data lifecycle.
Enterprise risk governance grounded in ISO 31000 — turning risk frameworks into repeatable, auditable processes the executive can trust.
Risk-led evaluation of cloud and SaaS providers — identifying exposure, contractual gaps and operational dependencies before they become incidents.
Business analysis and Agile delivery skills that ensure risk and security work lands cleanly inside delivery teams — not stuck in slide decks.
From the largest insurers and banks in South Africa to global brands and professional-services firms — here are some of the organisations I've helped operationalise risk, security and privacy.
Engagements were delivered under Mobius Consulting. Client details listed with discretion; all engagement specifics remain confidential.
Led a team of consultants on managed-service TPRM engagements, scaling assessment throughput across multiple enterprise clients.
Presented at ITWeb in 2024 on the practical application of AI in Third Party Risk Management — exploring where automation actually moves the needle.
Successful implementation of Phinity Risk Solutions across every client engagement to date — a clean track record on platform delivery.
Implemented and automated TPRM programmes that delivered measurable cost savings in both time and budget for clients.
University of Johannesburg · 2019
University of Johannesburg · 2015 – 2018
International Information System Security Certification Consortium
Continuous improvement runs through everything I do — Kaizen at the office, casts on the water at the weekend. When I'm not configuring TPRM workflows you'll find me deep in a campsite, on a riverbank, or down a rabbit hole of new music.
Whether you're rolling out TPRM from scratch, hitting an ISO 27001 milestone, or trying to operationalise privacy — let's talk.