Example profile. The firm, the person and every detail on this page are invented, to show what a verified profile looks like. Real profiles exist only for firms that have claimed their listing. Claim your firm's listing
Example Compliance Studio Independent consultant
Jordan Example · Austin, Texas, United States
✓ Verified on policyandcompliance.comSeptember 10, 2026
Readiness, policy writing and implementation for ISO 27001, SOC 2 and HIPAA. We work with software companies and healthcare practices of 10 to 200 people, often as their first security hire: we scope the audit, write the policies with your team, put the controls in place and stay with you through the auditor's fieldwork.
What they do
Standards they work with
Who they serve
- Company size
- 10 to 200 employees
- Industries
- Software and SaaS, healthcare practices
- Regions
- United States and Canada
- How they work
- Remote, and on site in Texas
Credentials
- CISA, Certified Information Systems AuditorISACAChecked on the ISACA register ↗
- ISO/IEC 27001 Lead ImplementerPECB
Role
Readiness and implementation, working alongside the CPA firm or certification body you choose.
Every engagement starts with a two-week gap assessment against the standard. Implementation then runs in two-week sprints with your engineering and operations leads, so the work fits around the product roadmap rather than stopping it.
We write the policy set with you, so the people who follow each policy are the ones who agreed its wording. During the audit we sit in on fieldwork, answer evidence requests and track any findings to closure. After certification we can stay on as a part-time vCISO for surveillance audits and the annual review.
Pricing
- ISO 27001 readinessFixed fee from $9,000
- SOC 2 Type 1 readinessFixed fee from $8,000
- HIPAA security risk assessmentFrom $4,500
- Part-time vCISOFrom $2,500 a month
Fixed fees cover the scope agreed at the gap assessment. On-site work in Texas is included; travel elsewhere is billed at cost.