ISO 27001 SOC2 Readiness Consultant

@alluankit01

RoleLens GRC Hi, I can support RoleLens as a hands-on part-time GRC consultant and manage ISO 27001 and SOC 2 readiness inside Sprinto, working with your Founder, technical team, MVP partner, Sprinto team, and auditors. The best solution is to first configure Sprinto with the right controls, owners, milestones, evidence requirements, and action tracker. I’ll then run the initial gap assessment, create a prioritised implementation plan, customise policies, maintain registers, review evidence quality, and make sure controls are actually implemented. I’m comfortable with ISO 27001, SOC 2 Type I/Type II readiness, SaaS security, cloud controls, access control, vendor risk, risk registers, asset registers, incident response, change management, audit evidence, and compliance reporting. Deliverables include: * Sprinto setup and control ownership * Gap assessment * Implementation roadmap * Policy customisation * Risk, asset, vendor and evidence registers * Compliance calendar and action log * MVP security/control alignment * Weekly progress report * Audit query and evidence support * ISO 27001 and SOC 2 readiness support Availability: around 5 hours/week. Sprinto/similar platform experience: [Add details] Certifications/sample reports/references: [Add details] I’ll focus on practical startup-ready compliance, not just templates. Best regards Ankit

@sahilcomputers39

Certified AWS Solutions Architect – Professional Certified AWS Solutions Architect – Associate CISA Certified Security Expert 16+ Years of Experience in Information Security, Cloud & Compliance Hi, I'm excited to support RoleLens in building ISO 27001 and SOC 2 readiness into your MVP from day one. I have hands-on experience leading ISO 27001 implementations, SOC 2 readiness programs, risk assessments, policy implementation, evidence management, and audit coordination for SaaS organizations. I have worked closely with compliance automation platforms similar to Sprinto, managing control mapping, evidence collection, risk registers, asset/vendor registers, and audit trackers while coordinating with technical teams and auditors. I have personally supported ISO 27001 certification and SOC 2 Type I & Type II readiness by driving implementation, closing compliance gaps, reviewing evidence, and ensuring controls are operational—not just documented. I can dedicate 5 hours/week, provide weekly progress updates, and work directly with your Founder, engineering team, Sprinto, and auditors until certification and audit completion. I'd be happy to share sample deliverables and client references upon request. Looking forward to discussing your compliance roadmap. Best regards, SHD

@kumarrishi9532

I have total 9 yrs of experience in managing aws azure cloud secuirty with multiple benchmark like CIS PCI Mitre Framework Best Practices to analyse security gaps and work on remediation

@karimwork1234

Hello! As an accomplished Full-Stack Engineer, SaaS founder, and business development professional, I bring a range of unique skills and expertise that make me a prime candidate for your ISO 27001 SOC2 Readiness Consultant role. My multifaceted background in software development, sales, risk management, and technical documentation aligns perfectly with your company's needs to incorporate information security, privacy, and compliance at each stage rather than as afterthoughts. My experience as a SaaS founder selling my own product - which not only culminated in attracting paying customers but also necessitated understanding business requirements and conveying the value of my offering - directly translates to my ability to grasp your specific needs and their integration into your MVP's development timeline. My potential contribution stretches from set up & managing the Sprinto ISO 27001/SOC 2 program through coordinating efforts with stakeholders to maintain records & support audit queries. With me onboard you can count on excellent client relationship management and end-to-end solutions that encompass concept to launch. Choose me for a liaison who can translate complex processes into practical applications while maintaining transparency through strong reporting. Let's leverage my creative problem-solving skills married with tenacious discipline attained through years of entrepreneurship to not just meet but exceed every expectation throughout the project journey!

@kandanulus

Hello, I am interested in supporting RoleLens Technologies as a part-time GRC and compliance consultant. I have 4+ years of experience in audit, compliance, process governance, risk and control assessment, ISO compliance, and audit readiness at Tata Consultancy Services (TCS). My experience includes internal audits, ISO 9001 and ISO 27001 compliance activities, CMMI assessments, audit evidence, process documentation, gap assessments, NCR/CAPA management, corrective-action tracking, and audit closure. I work closely with project teams, process owners, auditors, and stakeholders to identify gaps, resolve compliance issues, maintain evidence, and ensure actions are properly closed. I can support your team with ISO 27001 readiness, gap assessments, risk and control tracking, compliance documentation, audit evidence, corrective actions, process improvement, and stakeholder coordination. My approach is practical and execution-focused: identify the gap, assign ownership, follow up, validate evidence, and close the action. I have not worked directly with Sprinto or personally led a complete SOC 2 Type I/II cycle, and I prefer to be transparent about that. However, my ISO 27001, GRC, audit, and compliance experience provides a strong foundation to quickly understand your requirements and contribute effectively. I can commit approximately 5 hours per week during Indian business hours and would be happy to discuss your requirements.

@haritianat

**RoleLens GRC** Hello RoleLens Team, I'm a Cybersecurity Engineer with around 3 years of experience in security assessments, penetration testing, risk management, and ISO 27001-aligned governance. I enjoy helping organizations integrate security into their processes rather than treating compliance as a checkbox. I have contributed to ISO 27001 implementation activities, including security gap assessments, risk analysis, policy development, control implementation, and remediation planning. My role has involved working closely with technical teams to translate security requirements into practical actions and improve overall security posture. While I haven't worked directly with Sprinto, I'm experienced with compliance frameworks and evidence-driven security processes, and I'm confident in quickly adapting to new platforms. I have not independently led a full SOC 2 audit cycle, but I understand the requirements for audit readiness and supporting control implementation. I can commit approximately 5 hours per week and am available during Indian business hours when needed. I take ownership, communicate clearly with both technical and non-technical stakeholders, and focus on delivering practical, effective security solutions. I'd be excited to help RoleLens build a strong compliance foundation from the start and support your journey toward ISO 27001 and SOC 2 readiness. Kind regards, Haritiana Rakotoarisoa

@Sigbath253158

With over 5+ years of experience in Information Security, IT Governance, Risk & Compliance (GRC), ITGC, SOX, ISO 27001, SOC, Third-Party Risk Management (TPRM), Identity & Access Management (IAM), and IT Audit, I can act as your hands-on compliance program owner and help embed security and compliance into RoleLens from the MVP stage. I have practical experience establishing governance frameworks, conducting risk and gap assessments, implementing security controls, maintaining compliance documentation, managing evidence collection, and coordinating with technical teams to ensure controls are effectively implemented. My expertise includes maintaining risk, asset, vendor, and access registers; developing security policies and procedures; supporting incident response, change management, business continuity, and vendor risk processes; and preparing organizations for ISO 27001 and SOC audits.