STEPHEN W.

GRC & vCISO — SOC 2 Type II, ISO 27001, NIST CSF/800-53/800-171, CMMC, FedRAMP, HIPAA, PCI DSS, GDPR

CISM/PMP-certified security leader who takes organizations from scattered controls to audit-ready — and builds the program that keeps them there.

• Location: Louisiana, US
• Availability: Open to projects
• Languages: English

About

Stephen L. STEPHEN W. Sr. is a highly experienced Technical Project Manager with a strong background in cybersecurity governance, risk, and compliance (GRC). He has a proven track record of managing complex projects related to cloud security, identity and access management, and federal cybersecurity requirements.

With expertise in various security frameworks and a commitment to audit readiness, Stephen excels at bridging the gap between technical teams and business objectives to strengthen organizational security posture.

Specialisms

• soc-monitoring
• appsec-code-review

Skills

• ISO 27001 LEAD AUDITOR
• NIST CSF 2.0
• FISMA
• FedRAMP
• HIPAA
• HITRUST CSF
• PCI DSS
• SOX
• GRC
• Cybersecurity Governance
• Information Security
• Enterprise Risk Management
• Risk Assessment
• Risk Register
• Risk Scoring
• Risk Treatment
• Risk Acceptance
• Control Assessment
• Control Testing
• Control Design
• Operating Effectiveness
• NIST CSF
• NIST SP 800-53
• CIS Controls

Services offered

• I will perform an ISO 27001 gap assessment and build your certification roadmap — Certified ISO 27001 Lead Auditor maps your current state against all 93 Annex A controls and hands you a prioritized path to certification. ($10,000)

Heelr is the cybersecurity services marketplace by Cyberr. Compare verified providers, agree scope and pay through protected payments.

View this on Heelr · Browse cybersecurity services