Jesse H.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

For startups and small companies, navigating security compliance isn't just a checkbox—it's the key to unlocking enterprise deals, building customer trust, and scaling securely. With over 20 years of experience, I specialize in building practical, right-sized security and privacy programs that get you certified and sales-ready, fast. I act as a strategic partner, translating complex frameworks like SOC 2, HECVAT, and VPAT into actionable roadmaps. I handle the intricate details of compliance so you can focus on building your product and growing your business. My Core Services Include: ✅ Achieving Key Certifications & Attestations: Guiding you from readiness to final audit for frameworks that your customers demand: • HECVAT (Higher Education) • SOC 2 (Type 1 & 2) • ISO 27001 • TX-RAMP • NIST CSF • NIST 800-53 ✅ Strengthening Data Privacy & Trust: Building programs to meet complex regulatory requirements and protect your users: • GDPR • HIPAA (Health Information) • FERPA (Higher Education) ✅ Streamlining Security Operations & Sales Enablement: Developing the documentation and processes that prove your security posture: • VPAT (Accessibility) • CSA CAIQ & SIG Questionnaires • Vendor Risk Assessments (Both performing and responding to them) • NIST AI RMF (AI Risk Management) implementation ✅ Strategic Policy & Program Development: Creating the foundational documentation you need for audits and operations, including Business Continuity (BCP/DRP), Incident Response, Secure SDLC, AI Risk Management, and more. Whether you're tackling your first HECVAT questionnaire, preparing for a SOC 2 audit, or need to build a compliance program from the ground up, I provide the hands-on expertise to get it done efficiently. Ready to turn compliance from a hurdle into a competitive advantage? Let's connect.