Sagar Kamra
Principal Consultant and Director
Sagar brings around 10 years of CISO and ISMS leadership and more than 19 years across security, cloud and enterprise technology. He has built and run information security management systems in regulated environments, taken organisations through ISO/IEC 27001 certification and government accreditation, and audited systems built by others.
Phoebus Group was incorporated in 2026 to bring that experience to organisations that need it part-time, on a project, or as a managed service. The business is based in Sydney and works with clients across Australia and the Asia Pacific, remotely and on-site.
Credentials
- ISO/IEC 27001:2022 Lead Auditor (Exemplar Global certified)
- ISO/IEC 27001:2022 Lead Implementer
- Integrated Management Systems Lead Auditor: ISO 9001, ISO 14001 and ISO 45001 (Exemplar Global certified)
- ISC2 Certified in Cybersecurity (CC)
- Eligible for Australian Government security clearance
- 19+ years across security, cloud and enterprise technology, including around 10 years of CISO and ISMS leadership
Experience
At a glance
How we work
A clear path from where you are to a certificate you can show.
Assess
A gap assessment against the standard or framework you need, with a prioritised plan and a realistic timeline.
Build
Policies, controls, risk treatment and evidence written for your business, not copied from a template.
Audit
An internal audit and management review, so you walk into the external audit knowing what the assessor will find.
Sustain
Ongoing vCISO or managed compliance support, so the system keeps working after the certificate arrives.
What you can expect
Plain language, practical controls, no surprises
Written for your business
Policies and controls that match how you actually operate, so staff follow them and auditors can see they are followed.
Independent and honest
We tell you what the external auditor or IRAP assessor will find before they find it, and what it will take to fix.
Fixed scope where it counts
Projects are quoted with a clear scope and price. Retainers and managed services are a set number of days, reported monthly.
Want to know what Sagar would find in your system?
Request a scoping call and get an honest view of the gap before anyone else looks.