Samantha R.

Director of Cyber Operations and cybersecurity consultant specializing in SOC 2, ISO 27001, HIPAA, and NIST-based security and compliance for SaaS and healthcare organizations. I’ve led end-to-end SOC 2 and ISO 27001 readiness and certification efforts (with zero exceptions), built and matured risk management programs, and implemented third-party/vendor risk management for cloud-native environments. My background includes experience as an external SOC auditor, internal cyber risk and compliance leader, and co-founder of a cybersecurity consulting firm, where I help clients translate complex framework requirements into practical controls, policies, and evidence that withstand customer and auditor scrutiny. I can support you with audit readiness, gap assessments, policy and procedure development, control implementation, and customer security questionnaire support. I can help you with: - SOC 2 (Type I & II) and ISO 27001 readiness, gap assessments, and audit preparation - Designing and implementing security controls aligned to SOC 2, ISO 27001, HIPAA, NIST, and PCI DSS - Building and maturing cyber risk management programs, including risk registers and reporting - Third-party/vendor risk management, including due diligence, questionnaires, and data flow mapping - Developing and formalizing security policies, standards, and procedures tailored to your environment - Preparing evidence and documentation for external audits and customer security reviews - Responding to security questionnaires (SIG Lite, CAIQ, custom DDQs) and RFP security sections - BCP/DRP/IRP planning, documentation, tabletop exercises, and testing - Designing and delivering targeted security awareness training programs I specialize in: - SOC 1 - SOC 2 - NIST 800 Series - ISO 27001 - SIG Core/ SIG Lite - CSA Star - HIPAA - HITRUST - PCI DSS - GDPR