Farhan M.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Apr 7, 2026.

I am a Governance, Risk & Compliance (GRC) consultant with 25 years of experience helping organizations achieve compliance, strengthen security, and prepare for audits across multiple international standards and frameworks. I have hands-on expertise in: 1, ISO Standards: ISO 27001 (Information Security), ISO 27017/27018 (Cloud Security), ISO 31000 (Risk Management), ISO 22301 (Business Continuity), ISO 27701 (Privacy/GDPR), ISO 42001 ( Artificial Intelligence Management System) 2. Security & Compliance: PCI DSS, SOC 1/2/3, HIPAA, HITRUST, NIST Framework 3. Maturity Models: CMMC®, CMMI® (all levels), BS 10012 (Personal Data Management) 4. Regulatory & National Compliance including but not limited to NIST, FDA etc and others. 5. Audit Preparation and gap assessments for certifications and regulatory reviews Over the years, I’ve worked with clients in finance, healthcare, technology, and government sectors, guiding them through compliance journeys, building internal policies, and ensuring audit readiness. - 25 years of experience across global frameworks - Clear, business-focused approach (no unnecessary jargon) - Proven success in certification and regulatory compliance projects If you need help with compliance frameworks, risk management, or audit preparation, I can deliver results that are practical, effective, and aligned with your business goals.