muhammad k.

I help SaaS and cloud companies get ready for SOC 2 Type 1, SOC 2 Type 2, and ISO 27001 audits.

That means identifying what is missing, fixing the gaps, preparing the required policies and evidence, and keeping the entire process moving until you are ready for the auditor.

I am a Certified ISO 27001 Internal Auditor with hands-on SOC 2 experience.

🏅 Top Rated Plus - Top 3% on Upwork
🏅 100% Job Success
🏅 $200K+ earned
🏅 Experienced with Vanta, Drata, AWS, and SaaS environments

What I do best:
✔️ SOC 2 Type 1 and Type 2 readiness
✔️ ISO 27001 implementation and certification readiness
✔️ Gap assessments and internal audits
✔️ Risk assessments and risk treatment plans
✔️ Security policies and procedures
✔️ Control design and implementation
✔️ Evidence collection and review
✔️ Vanta and Drata setup or cleanup
✔️ Audit preparation and auditor coordination
✔️ Ongoing compliance and surveillance audit support

I do not just send you a checklist and leave your team to figure everything out.

I review your current environment, explain exactly what is missing, create a practical roadmap, and help your team complete the work.

For ISO 27001, I can support your ISMS scope, risk assessment, Statement of Applicability, Annex A controls, internal audit, management review, and certification preparation.

For SOC 2, I can help define the scope, map the relevant controls, prepare policies and evidence, manage remediation, and get you ready for Type 1 or Type 2.

I can also help you get more value from Vanta or Drata by fixing failed tests, organizing evidence, assigning control owners, reviewing integrations, and making sure the platform reflects what your company actually does.

𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗜𝗻:
✔️ ISO 27001 Certified Internal Auditor (Certiprof)
✔️ PMI ACP Agile Certified Practitioner
✔️ AWS Certified Solutions Architect, Associate

𝗧𝗼𝗼𝗹𝘀:
Vanta | Drata | SecureFrame | Sprinto | AWS | Azure | Github | GCP

Whether you are starting from zero, preparing for an upcoming audit, or fixing a compliance program that has become disorganized, I can help you build a clear path to audit readiness.