Jonathan R.

Cybersecurity & GRC Consultant | SOC 2, HIPAA, Risk Assessments

Need to prepare for SOC 2 or HIPAA, assess security risks, investigate suspicious activity, or turn technical findings into a practical action plan? I can help. I’m a Top Rated cybersecurity and GRC analyst with a 100% Job Success Score, multiple proven Upwork engagements, and certifications including CompTIA CySA+, Security+, and A+. My Bachelor's degree is in IT with a minor in cybersecurity. I help businesses identify security gaps, strengthen controls, prepare for compliance reviews, and create documentation that teams can actually understand and use. My services include: • SOC 2 and HIPAA readiness assessments • Security gap analyses and remediation roadmaps • Cybersecurity risk and vulnerability assessments • Security policies, procedures, and incident response plans • SOC runbooks, alert-triage guidance, and incident documentation • Security awareness and employee training materials • Splunk log analysis and technical investigations • SaaS, API, authentication, and access-control troubleshooting In my professional role at Toast, I investigate complex production issues involving APIs, authentication, integrations, data integrity, and cloud-based systems. I use Splunk, Postman, Salesforce, logs, and API payloads to identify root causes and recommend realistic solutions. My approach is evidence-driven and practical. You won’t receive a generic checklist filled with technical language. You’ll receive organized findings, clearly prioritized risks, and recommendations that explain what should happen next and why. Clients consistently describe me as knowledgeable, thorough, reliable, and easy to communicate with. My work has included security assessments, compliance documentation, cybersecurity training, compliance support (HIPAA, SOC 2, GLBA), SOC analyst work, and GRC consulting. If you need someone who can investigate the technical details and communicate the results clearly to stakeholders, send me a message with your current challenge.