Customer Data Protection Setup

My site is already live and collecting customer information, but the current safeguards are minimal. I need an experienced cybersecurity professional to focus exclusively on data protection: assessing the way customer details are stored and transmitted, closing any gaps you identify, and putting long-term controls in place so the data stays safe even as the site scales.

What I expect
• A concise risk assessment of my existing environment (server, database, APIs, third-party plugins).
• Implementation of best-practice controls—end-to-end encryption (SSL/TLS), database hardening, access-control policies, secure backups, and monitoring or alerting tools you feel are essential.
• A short validation report or penetration test summary confirming the fixes are effective.
• A handover document so I can maintain the new setup without compromising security.

Please share relevant past work that shows you have protected customer data for other websites or web apps; a couple of before/after examples or redacted assessment reports would be ideal. Access to the code repository and hosting panel will be provided once we agree on the plan and milestones.