Hire the Best Information Security Audit Freelancers in Florida

- Web Application Security & Penetration Testing - Independent security researcher specializing in manual web application security assessments. I identify real vulnerabilities that automated scanners miss, delivering clear professional reports with actionable remediation guidance. What I test for (OWASP Top 10): - Authentication & authorization flaws - Injection vulnerabilities (SQLi, SSTI, CRLF) - Sensitive data exposure - Security misconfigurations - API vulnerabilities and exposed credentials Tools & methodology: - Burp Suite (manual testing) - ffuf, SecLists - OWASP Top 10 2025 certified - Professional PDF report delivered with every assessment I've identified and responsibly disclosed vulnerabilities in funded startups including exposed API keys, plaintext credential storage, and authentication bypasses. - Why Choose Me - I'm a versatile freelancer with a proven track record of delivering quality work across multiple platforms and industries. With experience spanning real estate, customer service, AI training, penetration testing, and extensive freelance work, I bring a unique combination of business acumen and hands-on problem-solving skills to every project. - Professional Experience - * Freelance Professional | Self-Employed • Successfully built and managed a thriving freelance business across multiple platforms including TaskRabbit, Thumbtack, and Nextdoor • Consistently ranked as a top performer on TaskRabbit, generating substantial revenue through dedicated service • Developed strong client relationships leading to consistent word-of-mouth referrals and repeat business • Managed all aspects of business operations including scheduling, client communications, and financial management * Real Estate Professional | 2+ Years • Gained valuable experience in client relationship management and negotiation • Developed strong communication and precise organizational skills in a fast-paced environment * Additional Experience • Top Dasher at DoorDash, demonstrating reliability and excellence in service delivery • Past customer service experience at Honda dealership and Universal Studios • Proven ability to excel in diverse work environments - Why Choose Me - ✓ Fast Learner: I quickly adapt to new skills and technologies - from picking up new languages (currently I'm studying Indonesian daily) to picking up guitar, coding, and networking fundamentals ✓ Self-Motivated: I handle my own scheduling and project management ✓ Flexible Availability: Available most days of the week to accommodate your project needs ✓ Proven Track Record: Success across multiple freelance platforms with satisfied clients. (Upwork is the next one on the list!) ✓ Business-Minded: Real estate and entrepreneurial background brings strategic thinking to projects ✓ Reliable: Consistent top performance ratings across all platforms I've worked on - Let's Connect - I'm always expanding my skill set, whether it be diving into coding, mastering networking concepts, learning new penetration techniques, or picking up instruments, most recently, guitar. I'm always excited to take on new challenges and help bring your projects to life. Helping you, in turn, helps me learn more skills! Feel free to reach out to discuss how I can contribute to your success.

Your Partner for Risk-Based Security, Audit Readiness & Operational Resilience | $65/hr 🗽 U.S. | 🍁 Canada | 🌎 LATAM | 🌍 Global Clients Proven Track Record in Regulated & Enterprise Environments I’m a Security Engineer from the United States with 10+ years of experience helping regulated organizations strengthen their security posture through risk-based decision making, audit readiness, and operational security. I work directly with leaders, auditors, penetration testers, vendors, and engineering teams to ensure security programs are not just compliant, but effective, prioritized, and aligned to real business risk. Why I Stand Out 🔹 Risk-Based Security Approach I help organizations prioritize security investments and remediation efforts based on real risk, reducing noise and focusing on what materially impacts the business. 🔹 Engineer-First Execution I translate compliance requirements (SOC 2, PCI-DSS, NIST, HIPAA, CMMC) into practical, implementable solutions that work in real environments. 🔹 Audit & Compliance Expertise Experienced in control implementation, remediation tracking, evidence preparation, and working directly with auditors to ensure successful outcomes. 🔹 Real-World Risk Reduction Focused on vulnerability management, DevSecOps integration, and IAM governance to reduce exploitable attack surface, not just produce reports. Core Services 🔹 Audit Readiness & Remediation Control implementation, gap assessments, remediation tracking, audit support, and evidence preparation. 🔹 Risk-Based Vulnerability Management Threat-informed prioritization, CI/CD integration, SAST/DAST, dependency scanning, and actionable remediation strategies. 🔹 DevSecOps & Cloud Security IAM, secrets management, container security, encryption, logging, and secure CI/CD pipeline implementation. 🔹 Identity & Access Governance (IAM) Access reviews, RBAC enforcement, onboarding/offboarding processes, and policy alignment. 🔹 Security Assessments Cloud, network, application, and API security assessments aligned to real-world risk. Who I Work With 🔹 Regulated organizations preparing for audits 🔹 Enterprise teams building or maturing security programs 🔹 SaaS & cloud-native companies implementing DevSecOps 🔹 Organizations needing risk-based prioritization, not just tooling and reports I help teams execute, remediate, and operationalize security in a way that is sustainable long-term. 📞 Let’s connect for a 30-minute discovery call to build a risk-informed, audit-ready, and operationally effective security program.

Most organizations don’t fail audits because they lack security. They fail because their controls don’t hold up under real scrutiny. I’ve spent 10+ years making sure that doesn’t happen. As a CISSP-certified security professional, I spent six years as the sole security practitioner for an enterprise healthcare organization – owning every assessment, every audit, and every remediation from end to end. 24 security assessments. Zero failures. HITRUST certification achieved and maintained. That’s not a team result. That’s mine. What I deliver: ✔ Audit readiness that actually holds – HITRUST, HIPAA, PCI-DSS, NIST CSF ✔ Control gap analysis and mapping (NIST, ISO 27001, HITRUST CSF) ✔ Risk assessments with prioritized, defensible findings ✔ POA&Ms and remediation roadmaps that move the needle ✔ SIEM tuning and threat validation (Splunk, Rapid7, Alert Logic) ✔ Security policies built to survive auditor scrutiny, not just satisfy it By the numbers: • 24 consecutive assessments with zero audit failures • ~30% vulnerability reduction through structured remediation programs • Sole security POC across cloud and hybrid enterprise environments with constrained budgets and no margin for error I don’t just help organizations get compliant. I help them stay compliant when someone is actually looking. If that’s the standard you need, let’s talk.

Gabriel is an accomplished consultant, IT auditor & operations senior leader for a global tech firm and a decorated Military Officer. Gabriel has a proven track record of excellence across strategic planning, organizational leadership, and cross-functional team management. As a Senior Manager of IT Audit, Gabriel plans and executes on the audit plan and defines Objectives & Key Results for his managed services. Gabriel assists with his firm’s recruiting efforts for Managers and above and has a solid accounting background from his education and early auditing experience with a Big 4 Accounting Firm in New York City. Gabriel is also no stranger to a dynamically changing environment and empowers others to make decisions, coaching future leaders. Gabriel’s military background also helps in his ability to work under intense pressures and has a proven track record at delivering results timely. Gabriel’s key strength is the ability to thrive in the face of ambiguity and can take charge of a situation, set expectations, and hold himself and others accountable in the spirit of the growth mindset.

I am a high-energy eternal learner and tinkerer with a passion for people. An extremely driven results-focused individual with high autonomy and passion. I desire to enhance the world by connecting people through technology and by making technology as accessible as possible. Strong background in both the technical and the nontechnical world, helps me bridge the gap between the two.

Dedicated GRC Analyst and Technical Writer specializing in building "Audit-Ready" documentation and internal control frameworks. I help organizations navigate the complexities of compliance by translating technical security requirements into clear, actionable policies and Standard Operating Procedures (SOPs). With a background in high-volume compliance auditing and current studies in Cybersecurity and Information Assurance at WGU, I bridge the gap between technical controls and business operations. My Core Expertise Includes: SOP Development: Authoring comprehensive, step-by-step procedures that meet the "re-performance standard" for external auditors. Compliance Gap Analysis: Experience identifying 50+ control deficiencies and providing actionable remediation paths. Framework Alignment: Developing documentation mapped to NIST CSF, SOC 2, and ISO 27001 standards. Risk Documentation: Creating risk prioritization frameworks and maintaining evidence trackers for internal audits. Data Privacy Support: Managing documentation for privacy regulations, including DSAR intake and processing workflows. Why Work With Me? I don't just write—I audit. My goal is to ensure your documentation isn't just a "check-the-box" exercise, but a functional asset that reduces risk and simplifies your next audit engagement. Education & Certifications: B.S. Cybersecurity and Information Assurance (In Progress) – Western Governors University ISC2 Certified in Cybersecurity (CC) Google Cybersecurity Professional Certificate CompTIA Tech+ Certificate