Hire the best Information Security Audit Freelancers in California

Check out Information Security Audit Freelancers in California with the skills you need for your next job.
  • $99 hourly
    I help organizations build and manage a strong cybersecurity program. I have established resilient cybersecurity in Fortune 100 companies —Warner Bros., EA Sports, Pfizer, State Farm Insurance, and Goldman Sachs and can do the same for your business.
    Featured Skill Information Security Audit
    Cloud Security
    Network Security
    Cybersecurity Monitoring
    SOC 2
    HIPAA
    PCI
    Certified Information Systems Security Professional
    ISO 27001
    Security Infrastructure
    Compliance Consultation
    Web Application Security
    Vulnerability Assessment
    Penetration Testing
    Security Policies & Procedures Documentation
  • $150 hourly
    Education: 10+ years accounting, audit, business, forensics and information: administration, assurance, security and technology education resulting in two bachelor and two master degrees as well as ten graduate certificates and/or certifications at the University of South Florida, Harvard University and Capitol Technical University. Experience: 25+ years of information: audit, compliance, freelance, governance, policy, risk management, security operations, technical writing and/or technology experience at nine entities in six roles as a security: analyst, auditor, consultant, freelancer, instructor and programmer in six industries in banking, health, GOV, non-profit education, technology and telecom. Accomplishments: * Authored 250+ policies & procedures.. * Conducted 50+ audits & assessments. * Utilized 25+ frameworks & standards. * Managed 25+ security projects. * Defended 100+ incident attack types. * Conducted 10+ PCI compliance Awarded: * Achieved top 1% and earned "Innovative Solution" award in vulnerability management recognized by EDUCAUSE in non-profit education. * Safeguarded police & fire station safety systems. * Secured critical U.S. infrastructure. *Founded two IT security programs and achieved the City of San Antonio's first PCI compliance. Website: vciso.biz Regards, Raymond (Scott) Miller MBA MSIA CISA CIA CGAP CFE R.Scott.Miller@usa.com
    Featured Skill Information Security Audit
    Technical Writing
    Information Security Threat Mitigation
    PCI DSS
    NIST Cybersecurity Framework
    NIST SP 800-53
    ISO 27001
    HIPAA
    Information Security Awareness
    Information Security Governance
    Information Security Consultation
    Vulnerability Assessment
    Rapid7 Nexpose
    Security Policies & Procedures Documentation
    Information Security
  • $120 hourly
    Visionary CIO with a proven track record of driving digital transformations, unlocking strategic agility, and capitalizing on cutting-edge technology projects to leapfrog competition and deliver outstanding business results. I expertly align technology investments with corporate objectives to accelerate: growth, operational efficiency, and compliance. My transformational leadership creates high-performance teams that foster innovation, continuous improvement, and problem-solving with data-driven decisions. Serving as a trusted advisor to C-level executives, I shape the future of organizations by implementing innovative technology solutions to generate exceptional value and dominate global markets. Let's forge a tech edge!
    Featured Skill Information Security Audit
    Scrum
    Conversion Rate Optimization
    IT Asset Management
    Vendor Management
    Prompt Engineering
    Brand Naming
    Brand Strategy
    Brand Positioning
    Content Creation
    Content Strategy
    AI Consulting
    Business Strategy
    Product Strategy
    Artificial Intelligence
  • $150 hourly
    I am an experienced technology executive with over 20 years of experience in security, cloud, data centers, and managed services. I co-founded and served as CTO for VPLS, an MSSP and private cloud service provider with 150 employees, thousands of servers, and petabytes of storage across three global NOCs. At VPLS, I implemented the cybersecurity program, achieving SOC 2, HIPAA, and PCI certifications for all our services. We grew the business profitably until October 2019, when we sold the business to Evocative Data Centers. I then served as VP of Operations at Zenlayer, a global edge cloud service provider with 275+ global data centers and over 650 employees. I led Zenlayer's security transformation initiatives and ISO 27001 and SOC 2 compliance efforts. While at Zenlayer, I scaled operational efficiencies with the security of our customer’s data as the number one priority. I am now co-founder and CEO of Bright Defense, which offers continuous cybersecurity compliance. Our offering includes: - Managed continuous cybersecurity compliance - Compliance automation - Implementation of Information Security / Cybersecurity Programs - Gap Analysis, Assessment, Remediation, Certification and Assurance reports - vCISO services - Managed security awareness and phishing
    Featured Skill Information Security Audit
    HIPAA
    CMMC
    Certified Information Privacy Technologist
    Certified Information Security Manager
    Information Security Governance
    Security Engineering
    SOC 1
    SOC 2 Report
    SOC 2
    NIST SP 800-53
    NIST Cybersecurity Framework
    Information Security Consultation
    Cybersecurity Management
    Information Security
  • $151 hourly
    - I am a Senior Security Engineer with expertise in application, product security, vulnerability management, and security automation. - I have over a decade of experience in software development processes and security engineering. - I hold a master’s degree in Cybersecurity from Georgia Institute of Technology. - I am proficient in Python, Node.js, and Bash. - Fluent in English, Russian, and Armenian.
    Featured Skill Information Security Audit
    Bash Programming
    JavaScript
    Python Script
    NIST Cybersecurity Framework
    Website Security
    Cloud Security
    Secure SDLC
    Security Engineering
    Application Security
    Threat Detection
    Vulnerability Assessment
    Information Security Threat Mitigation
    Information Security
    Compliance
  • $85 hourly
    With over 15 years of invaluable experience in the IT industry, I bring a wealth of expertise to the table. Specifically, I have dedicated 8 years of my career to specializing in compliance standards such as HIPAA, HITECH, NERC, ISO 27001, and ADA. My approach involves a meticulous step-by-step process that enables me to thoroughly analyze and address the unique needs of your organization. Having successfully dealt with HIPAA security breaches in the past, I am well-equipped to handle time-sensitive matters with utmost dedication. My primary goal is to ensure that my clients avoid substantial fines and penalties by promptly remedying any compliance issues. If you are in search of a comprehensive risk assessment, I am pleased to offer my services detailed below.: Security Risk Analysis o Annual Risk Assessment o Business Associate Agreement (BAA) o IT Security Documentation o IT Policy and Procedures o Report Analysis o Remediation Recommendations Website Compliance o Review website for ADA, CCPA, and GDPR compliance o HIPAA compliance is by scope only. o Security screenings o Monitoring o Backups o Remediation Strategies Network Vulnerability Assessment o Scoping o Threat Assessment o Setup & Configuration o Vulnerability Report Analysis o Remediation Recommendations Monthly Monitoring o Monthly Security Monitoring and Alerts o HIPAA compliance and alerts against malicious events o Website monitoring, compliance, monthly reports.
    Featured Skill Information Security Audit
    Firewall
    Network Engineering
    Cisco
    FortiGate Firewall
    Fortinet
    Information Technology Strategy
    Network Monitoring
    Security Analysis
    Vulnerability Assessment
    Network Security
    IT Compliance Audit
    ISO 27001
    HIPAA
    Risk Assessment
  • $80 hourly
    Over 25+ years of real-world IT experience with heavy exposure to security, vulnerability & risk assessments, penetration testing, ERP systems and Microsoft SQL Server. Experienced with the following tools/processes: CrowdStrike, penetration testing, OSINT, Burpsuite, Greenbone vulnerability scanner, Kali Linux, Metasploit Framework, OWASP Zap, MITRE Attack Framework, GRC, BCP/DR, Google Cloud, ELK Stack, Python, C# Well-versed in security assessments based on NIST 800-53 security controls, vendor risk analysis & SOC 2 reviews, creating security awareness training & phishing campaigns, and policy/procedure writing. Specializing in: - Information Security - Project management - System administration - Database & system design - ERP systems (Financials, HR, and Budgeting)
    Featured Skill Information Security Audit
    NIST Cybersecurity Framework
    Website Security
    Internet Security
    Information Security Awareness
    Information Security Governance
    Microsoft SQL Server Administration
    Enterprise Resource Planning
    Project Management
    System Security
    Information Security
    Cybersecurity Management
  • $150 hourly
    Big 4 CYBERSECURITY Consultant - CISSP Accomplished IT Professional with 20 years of experience fostering forward-thinking Cybersecurity solutions to high-profile companies on large-scale and mission-critical projects. Advised organizations on risk management and strategic projects to prevent cyber-attacks and meet operational goals. Exceptionally skilled in providing tactical technological direction, directing risk management initiatives, implementing key information security strategies, and leading teams to resolve technical issues. Result-oriented leader with a track record of achieving unparalleled results while bridging the gap between technical experts and company executives. Articulate communicator, capable of multitasking in a dynamic environment. Areas of Proficiency Cybersecurity Strategy | Gap Identification & Remediation | NIST CSF | NIST 800-53 | |CISO Dashboard | Data Analytics | App & Interface Security | Audit Assurance & Compliance | Data Security | Information Lifecycle Management | Security Incident Management | Risk Mitigation & Analysis | Cloud & Network Security | Secure Software Development | Vulnerability Assessment & Management | Cyber Defense | Information Security Management | Threat Management | Firewalls & Malware Analysis | Information Technology | Intrusion Detection | Identity & Access Management
    Featured Skill Information Security Audit
    Risk Assessment
    CIS Control Assessment
    NIST SP 800-53
    GDPR Compliance Review
    Cybersecurity Tool
    NIST Cybersecurity Framework
    ISO 27001
    Data Protection
    GDPR
    Information Security Governance
    Information Security Consultation
    Cybersecurity Management
  • $100 hourly
    I am a cybersecurity and privacy leader with a strong background in risk management, compliance, and governance. I lead cybersecurity and privacy initiatives across the organization to ensure compliance with industry standards and regulatory requirements. My expertise lies in developing risk models, frameworks, and policies that enhance security postures and enable data-driven decision-making. With experience spanning Fortune 50 companies, I have successfully designed and implemented Third-Party Risk Management (TPRM) programs, cloud security strategies (AWS, Azure, GCP), and information security assessments aligned with NIST, ISO 27001, PCI, GDPR, HIPAA, and more. I have also spearheaded critical infrastructure risk and compliance efforts, reducing security risks and improving risk prioritization strategies. I thrive in complex, high-stakes environments, collaborating with cross-functional teams to drive security initiatives that protect organizations and their stakeholders. Whether advising senior leadership, managing global risk programs, or fostering a culture of security awareness, my goal is to make cybersecurity and compliance seamless, scalable, and effective. Let’s connect if you’re looking for an experienced security and risk professional who can help strengthen your organization’s security and compliance posture!
    Featured Skill Information Security Audit
    ISO 27001
    NIST Cybersecurity Framework
    Information Security Threat Mitigation
    Certified Information Security Manager
    Federal Information Security Management Act of 2002
    Information Security Governance
    Information Security Consultation
    Privacy
    Privacy Impact Assessment
    Cybersecurity Tool
    Cybersecurity Management
    Information Security
    Government Reporting Compliance
    Compliance
  • $50 hourly
    I work directly with clients to solve complex problems and enhance their information security. I have over a decade of experience in cybersecurity, risk management, and project management, and hold the CISSP, CRISC, and Security+ certifications. My mission is to help organizations protect their assets and data from cyber threats and comply with the latest policies and standards.
    Featured Skill Information Security Audit
    Risk Assessment
    Governance, Risk Management & Compliance
    Project Management
    Technical Writing
    IT Compliance Audit
    Security Policies & Procedures Documentation
    Information Security Governance
    Information Security Consultation
    NIST SP 800-53
    NIST Cybersecurity Framework
    Cybersecurity Management
    Information Security
  • $50 hourly
    Security professional with a proven track record in risk management program development, process streamlining, and driving compliance initiatives (PCI DSS, SOC 2, ISO 27001/27701, FedRAMP, C5, BSI) in fast-paced and innovative environments. Skilled in security risk assessments, vendor management, and cross-departmental collaboration to achieve security and compliance goals.
    Featured Skill Information Security Audit
    Information Security Consultation
    Information Security Governance
    Information Security Awareness
    Security Policies & Procedures Documentation
    Security Assessment & Testing
    SOC 2
    Network Access Control
    GDPR Compliance Review
    GDPR
    NIST SP 800-53
    NIST Cybersecurity Framework
    ISO 27001
  • Want to browse more freelancers?
    Sign up

How hiring on Upwork works

1. Post a job

Tell us what you need. Provide as many details as possible, but don’t worry about getting it perfect.

2. Talent comes to you

Get qualified proposals within 24 hours, and meet the candidates you’re excited about. Hire as soon as you’re ready.

3. Collaborate easily

Use Upwork to chat or video call, share files, and track project progress right from the app.

4. Payment simplified

Receive invoices and make payments through Upwork. Only pay for work you authorize.

Trusted by 5M+ businesses