End to end support for certify organization in ISO 42001, ISO 27001 & SOC Certification Support
Budget / Salary₹75,000–150,000
TypeFreelance project
LocationRemote
Posted1 hour ago
Our company is ready to build a robust compliance program from the ground up and secure four credentials in one coordinated effort: ISO 42001, SOC 1, SOC 2, and ISO 27001. We have no certifications in place today, so I need a partner who can guide us through every stage—from the very first gap assessment through to the final external audits and issuance of certificates.
Scope of work
• Consultation & planning: Perform an initial readiness review, map our current controls (or lack thereof) to ISO and SOC requirements, and develop a realistic multi-phase roadmap that aligns with our business priorities.
• Documentation & implementation: Draft all mandatory policies, procedures, control matrices, risk assessments, and evidence logs. Support rollout of each control, whether technical (e.g., access management, vulnerability scanning) or procedural (e.g., vendor due-diligence, incident response). We use Microsoft 365, Azure, and AWS; experience with these environments and any GRC tooling (e.g., Vanta, Drata, or similar) will be valuable.
• Audit & certification: Prepare audit work-papers, coach our team for auditor interviews, and liaise directly with the chosen certification body / CPA firm until we receive the official ISO certificates and SOC reports (Type I and eventually Type II).
Acceptance criteria
1. Approved project plan covering all four standards with milestones and ownership.
2. Complete policy set that satisfies ISO 42001 & ISO 27001 Annex A controls and SOC Trust Services Criteria.
3. Evidence repository populated and accepted by the external auditor.
4. Successful issuance of ISO 42001 and ISO 27001 certificates plus SOC 1 & SOC 2 Type I reports, with no major non-conformities.
If you have a proven track record delivering simultaneous ISO and SOC engagements, I’d like to hear how you would structure the project, which audit firms you prefer, and any automation tools you find most effective.
Scope of work
• Consultation & planning: Perform an initial readiness review, map our current controls (or lack thereof) to ISO and SOC requirements, and develop a realistic multi-phase roadmap that aligns with our business priorities.
• Documentation & implementation: Draft all mandatory policies, procedures, control matrices, risk assessments, and evidence logs. Support rollout of each control, whether technical (e.g., access management, vulnerability scanning) or procedural (e.g., vendor due-diligence, incident response). We use Microsoft 365, Azure, and AWS; experience with these environments and any GRC tooling (e.g., Vanta, Drata, or similar) will be valuable.
• Audit & certification: Prepare audit work-papers, coach our team for auditor interviews, and liaise directly with the chosen certification body / CPA firm until we receive the official ISO certificates and SOC reports (Type I and eventually Type II).
Acceptance criteria
1. Approved project plan covering all four standards with milestones and ownership.
2. Complete policy set that satisfies ISO 42001 & ISO 27001 Annex A controls and SOC Trust Services Criteria.
3. Evidence repository populated and accepted by the external auditor.
4. Successful issuance of ISO 42001 and ISO 27001 certificates plus SOC 1 & SOC 2 Type I reports, with no major non-conformities.
If you have a proven track record delivering simultaneous ISO and SOC engagements, I’d like to hear how you would structure the project, which audit firms you prefer, and any automation tools you find most effective.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.