GRC and Cybersecurity Services

Remote ISO 27001 consulting: gap analysis, ISMS scope, risk assessment, Statement of Applicability, policies, internal audit and certification audit preparation for ISO/IEC 27001:2022.

Remote GDPR compliance support for security and privacy teams: data mapping, records of processing, DPIAs, Article 32 security controls, processor contracts and 72-hour breach readiness.

Information security policy writing: a top-level policy, topic-specific policies, standards and procedures mapped to ISO 27001, NIST CSF and GDPR, with owners, review cycles and an exceptions process.

Remote cybersecurity risk assessment aligned with ISO/IEC 27005 and NIST SP 800-30: asset and threat analysis, 5x5 risk scoring, risk appetite, treatment plans and a working risk register.

A security awareness and training program for small and mid-sized businesses: baseline and role-based training, fair phishing simulations, policy acknowledgements and metrics leadership can track.

SOC 2 readiness support: scoping Trust Services Criteria, control design, policies, evidence collection, readiness assessment and preparation for a Type 1 or Type 2 examination.

Third-party and vendor risk assessment: supplier tiering, security questionnaires, evidence review, contract clauses, GDPR Article 28 checks and ongoing monitoring of critical suppliers.

Hire a remote GRC analyst to own security policies, compliance tracking, risk registers, awareness training, audit support and compliance reporting, as a full-time hire, contractor or consultant.