Carrie S.

I help organizations strengthen their security and compliance posture by identifying gaps, mapping controls, preparing for audits, and building the documentation and processes auditors expect. With extensive experience supporting SOC 2, ISO 27001, SOX, HIPAA, and NIST frameworks, I specialize in simplifying complex requirements and delivering clear, organized, audit-ready materials that keep your team focused and your auditors confident. How I can help your organization: SOC 2 & ISO 27001 Readiness – scoping, control mapping, evidence collection, audit artifacts *Risk Assessments & Security Reviews – qualitative & quantitative assessments, treatment plans *Control Mapping & Compliance Alignment – multi-framework harmonization *Threat & Vulnerability Management & Remediation Tracking *Policy & Procedure Documentation – IR, access control, change management, vendor risk, etc. *Remediation Management – coordinating with engineering, IT, product & security teams *M&A Compliance & Security Reviews *Firewall & Access Review Support (principle of least privilege, RBAC, UAR workflows) *Metrics, Reporting & Executive-Level Dashboards *Cross-Functional Project Management for GRC Initiatives I'm collaborative, detail-oriented, and comfortable working with engineering, security, finance, and leadership teams to drive remediation, improve control maturity, and prepare companies for successful audits. If you need help getting audit-ready, building documentation, assessing risk, or improving your compliance program, I’m ready to support you.