Reda R.

I help organizations achieve audit-ready compliance across SOC 2, ISO 27001, NIST SP 800-171, HIPAA, and other security frameworks, with a structured, practical, and results-driven approach. As a Cybersecurity & GRC Consultant, I specialize in designing and implementing complete compliance programs from the ground up, including control mapping, policy development, risk assessments, and audit preparation. I don’t just deliver documentation, I ensure your controls are properly implemented, your evidence is aligned, and your environment is ready to withstand real audits. Recently, I led a full NIST SP 800-171 compliance engagement, developing the SSP and POA&M, supporting control implementation, and bringing the organization to an SPRS score of 110. My expertise covers: • SOC 2 (Type I & II readiness) • ISO 27001 implementation & documentation • NIST SP 800-171 / CMMC compliance • HIPAA security rule alignment • Risk assessments and control frameworks • Policy and procedure development • Audit readiness and evidence preparation What sets my approach apart: • Framework-agnostic methodology (I adapt to your compliance needs) • Practical, implementation-focused guidance (not just theory) • Clear, structured, and audit-ready deliverables If you need to build, fix, or scale your compliance program, I can help you get there efficiently and correctly.