Information Security Certification (ISO 27001:2022 and SOC 2) Consultant Needed
Budget / Salary$250–750
TypeFreelance project
LocationRemote
Posted2 hours ago
Overview:
We are seeking an experienced information security consultant to guide us through ISO 27001 certification and SOC 2 (Type I → Type II) attestation. We need to formalize our security posture for enterprise procurement requirements.
Scope:
Gap assessment against ISO 27001:2022 and SOC 2 Trust Services Criteria · ISMS documentation and policies · risk assessment and control implementation · audit prep and liaison with certification bodies · ongoing compliance support.
Requirements:
Proven ISO 27001/SOC 2 track record with references · comfortable with SME-scale engagements · ISO 27001 Lead Implementer/Auditor certification preferred · remote, responsive communication.
To apply, share: relevant certifications, 2–3 similar engagement examples, proposed timeline and fee.
Please begin your application with the words ‘ISO 27001:2022 and SOC 2 Trust Services’ so I know you have read the complete brief.
We are seeking an experienced information security consultant to guide us through ISO 27001 certification and SOC 2 (Type I → Type II) attestation. We need to formalize our security posture for enterprise procurement requirements.
Scope:
Gap assessment against ISO 27001:2022 and SOC 2 Trust Services Criteria · ISMS documentation and policies · risk assessment and control implementation · audit prep and liaison with certification bodies · ongoing compliance support.
Requirements:
Proven ISO 27001/SOC 2 track record with references · comfortable with SME-scale engagements · ISO 27001 Lead Implementer/Auditor certification preferred · remote, responsive communication.
To apply, share: relevant certifications, 2–3 similar engagement examples, proposed timeline and fee.
Please begin your application with the words ‘ISO 27001:2022 and SOC 2 Trust Services’ so I know you have read the complete brief.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.