Lamont V.

🛡️ Serious security. Fast compliance. Practical cybersecurity that helps your business stay secure and move forward. Enterprise customers expect strong security, compliance, and risk management before they sign contracts. I help organizations meet those expectations with practical, audit-ready solutions backed by years of hands-on experience. With a background as an ISSO, real-world security testing, compliance, and security program development, I support businesses that need to strengthen security without slowing operations. My work spans technical security, governance, compliance, documentation, and employee cybersecurity awareness—so clients get more than a checklist or automated scan. ⭐ Why Clients Choose Me - CISSP, GCIH, ITIL – Industry-recognized credentials - Senior-Level Experience – ISSO, compliance lead, and hands-on cybersecurity consultant - Business-Friendly Security – Practical solutions that reduce risk and support growth - Clear, Actionable Work – No fluff or generic templates - Reliable Delivery – Clean documentation, direct communication, and practical guidance Whether you're preparing for an audit, securing a web application, building a security program, or improving employee cybersecurity awareness, I can help. 🔒 Core Services GRC & Compliance - SOC 2 readiness - NIST 800-53 / NIST CSF implementation - HIPAA security assessments - FedRAMP-style documentation and control mapping - SSPs, POA&Ms, risk registers, incident response plans - Policy and procedure development - Vendor risk assessments and security questionnaires **Security Assessments & Testing** - Web application and WordPress security testing - Vulnerability assessments and remediation guidance - Cloud security reviews - IAM and access-control reviews - Security hardening and misconfiguration cleanup - Post-remediation validation Cybersecurity Awareness & Workforce Training - Employee cybersecurity awareness programs - Phishing and social engineering awareness - Password, MFA, and account-security training - Sensitive-data handling and privacy awareness - AI and generative AI security risks - Remote-work and mobile-device security - Industry-specific training for healthcare, education, professional services, nonprofits, and small businesses - Knowledge assessments, quizzes, and completion certificates - Custom training aligned to organizational policies and real-world risks Training can be developed as self-paced content, virtual course material, presentations, assessments, or complete awareness programs designed for nontechnical employees. 🛡️ ISSO-Style Documentation & Support - Audit-ready documentation - Control narratives and implementation statements - Continuous monitoring packages - Security governance documentation - Evidence preparation and remediation tracking 💬 What Clients Can Expect - Senior-level cybersecurity guidance - Clear communication without unnecessary jargon - Deliverables designed for real operational use - Security recommendations that balance risk and business needs - Documentation that supports audits and customer security reviews 🛡️ Capabilities Frameworks: SOC 2 · NIST 800-53 · NIST CSF · FedRAMP · HIPAA · ISO 27001 fundamentals · PCI DSS Security Domains: Cloud security · IAM · SIEM/logging · WordPress security · Web application testing · Vulnerability management · Security awareness Tools: Emass · Nessus · Burp Suite · WPScan · Splunk · CrowdStrike · Vanta · Drata · TrustCloud · IAM tools · OSINT tools 📈 Make Security a Business Advantage If you need help passing an audit, improving your security posture, validating the security of an application, or building a cybersecurity awareness program your employees can actually understand and use, I can step in and help. Practical security. Clear guidance. Work that gets used.