Bilal I.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Sep 25, 2026.

I help SaaS companies, healthcare organizations, technology companies, and service providers prepare for security audits, compliance requirements, and customer security reviews. My focus is practical GRC and audit readiness—not simply producing policies that sit on a shelf. I can help you assess your current environment, identify compliance gaps, build the remediation roadmap, develop required documentation, organize evidence, and prepare your team for an external audit or customer assessment. My core areas include: • SOC 2 Type I & Type II readiness • HIPAA Security & Privacy compliance readiness • ISO 27001 readiness and internal controls • NIST CSF / NIST 800-53 / NIST 800-171 alignment • PCI DSS compliance support • Information security risk assessments • Security policies and procedures • Risk registers and control matrices • Vendor / third-party risk assessments • Audit evidence preparation • Internal audit and gap assessments • Remediation and corrective-action tracking • GRC program development and ongoing support My approach is straightforward: 1. Understand your business, systems, scope and compliance objective. 2. Assess your current controls, documentation and evidence. 3. Identify the actual gaps and prioritize them by risk and audit impact. 4. Build practical remediation actions with clear owners and deadlines. 5. Help your team produce and organize the evidence needed for the assessment. 6. Support you through audit preparation and follow-up. If you already have policies, a GRC platform, a previous audit report, or a list of customer security requirements, I can work with what you have rather than asking you to start from scratch. Typical engagements include compliance gap assessments, audit-readiness projects, policy/control development, remediation support, and fractional GRC support. If your immediate problem is "we have an audit coming and don't know what is missing," I can start with a focused gap assessment and give you a prioritized roadmap before you commit to a larger implementation project.