Hire the Best Risk Assessment Freelancers
in Canada

You need someone who catches what others miss, I built that skill at RBC. I am a Certified in Cybersecurity (CC) professional with hands-on experience in threat detection, social engineering analysis, and compliance verification at one of Canada's top banks. Whether you need phishing analysis, security awareness content, or rigorous data quality review, I deliver accurate, evidence-backed results under strict guidelines. **What I bring to your project:** ✅ Phishing & social engineering detection (trained on real fraud attempts at RBC) ✅ AI-assisted research, prompt engineering & LLM output evaluation ✅ Fact-checking, misinformation detection & source triangulation ✅ Data annotation, quality review & complex guideline adherence ✅ ISC2 CC | Google Cybersecurity | CIM Certified | Workflow Specialist I've boosted brand engagement by 40% through data-driven strategies and maintained 100% compliance in audit documentation at an institutional level. I work with clear communication, precise deliverables, and no excuses. Send me a message, let's get your project done right.

I’m a CAMS‑certified AML specialist with hands‑on experience completing KYC remediation, EDD reviews, transaction monitoring, sanctions screening, and SAR drafting for fintechs, MSBs, and financial institutions.I’ve delivered [insert your number] AML/KYC projects on Upwork with consistent 5‑star feedback, helping clients reduce backlog, prepare for audits, and strengthen their financial crime controls. What I specialize in: • KYC remediation (retail, business, high‑risk) • Enhanced Due Diligence (PEPs, crypto, MSBs, high‑risk geographies) • Transaction monitoring investigations • SAR drafting & narrative structuring • Sanctions screening (OFAC, UN, EU) • Fintech onboarding & risk scoring Why clients hire me: • CAMS‑certified (globally recognized AML credential) • Fast turnaround for backlog or surge support • Clear, audit‑ready documentation • Experience with multiple AML tools (e.g., ComplyAdvantage, LexisNexis, WorldCheck) If you need help with backlog cleanup, regulatory deadlines, or ongoing AML support, I can step in immediately. Happy to complete a sample review so you can see my approach.

I help organizations achieve audit-ready compliance across SOC 2, ISO 27001, NIST SP 800-171, HIPAA, and other security frameworks, with a structured, practical, and results-driven approach. As a Cybersecurity & GRC Consultant, I specialize in designing and implementing complete compliance programs from the ground up, including control mapping, policy development, risk assessments, and audit preparation. I don’t just deliver documentation, I ensure your controls are properly implemented, your evidence is aligned, and your environment is ready to withstand real audits. Recently, I led a full NIST SP 800-171 compliance engagement, developing the SSP and POA&M, supporting control implementation, and bringing the organization to an SPRS score of 110. My expertise covers: • SOC 2 (Type I & II readiness) • ISO 27001 implementation & documentation • NIST SP 800-171 / CMMC compliance • HIPAA security rule alignment • Risk assessments and control frameworks • Policy and procedure development • Audit readiness and evidence preparation What sets my approach apart: • Framework-agnostic methodology (I adapt to your compliance needs) • Practical, implementation-focused guidance (not just theory) • Clear, structured, and audit-ready deliverables If you need to build, fix, or scale your compliance program, I can help you get there efficiently and correctly.

Experienced Governance, Risk and Compliance specialist with over 7 years of experience building and maintaining Security & Privacy programs. Expert experience in creating security policies, risk registers, controls management, risk management, security training, etc.

As a Cybersecurity Consultant specializing in Governance, Risk, and Compliance (GRC), I help organizations align their security practices with leading standards and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls. My goal is to transform complex security requirements into practical, measurable actions that strengthen your security posture and meet audit expectations. With over 3 years of experience in cybersecurity—spanning penetration testing, risk assessment, and compliance readiness—I bridge the gap between technical teams and management to build resilient, policy-driven security programs. Core Expertise: Security governance and compliance assessments (ISO 27001, SOC 2, NIST, GDPR, HIPAA) Risk management, control evaluation, and remediation planning Policy and procedure development (security policies, data protection, incident response, etc.) Vendor risk management and third-party due diligence Gap analysis and audit preparation Security awareness training and documentation support I combine hands-on security experience with a strategic understanding of organizational risk, helping clients establish frameworks that not only pass audits—but genuinely improve business resilience and trust. Let’s work together to align your cybersecurity strategy with business goals and compliance objectives. Reach out today for a consultation or a tailored GRC roadmap.

Is a major corporate client or prospective buyer blocking your B2B sales contract until you show proof of compliance? Don't let rigid frameworks stall your time-to-revenue. As a certified ISO 27001 Lead Auditor and credentialed PCI Professional (PCIP) with a professional background deep inside institutional banking operations, I bridge the gap between abstract security regulations and your business growth. I specialize in streamlining audit readiness, minimizing compliance scope, and helping fast-growing startups unblock stalled revenue lines to win enterprise contracts. By moving past generic compliance checklists, I focus on practical, business-oriented recommendations that align your security posture with corporate governance standards. Specialized GRC Services: ISO 27001:2022 Implementation & Gap Analysis PCI DSS Scope Reduction & SAQ Guidance NIST CSF Security Risk Assessments Third-Party Risk Management (TPRM) & Vendor Reviews Enterprise Security Questionnaire Responses Fractional vCISO Advisory Client Deliverables Include: Executive Summary & Maturity Board Presentations Detailed Gap Assessment Matrix (Excel Frameworks) Corporate Risk Register & Statement of Applicability (SoA) Prioritized Technical Remediation Roadmaps Customized Security Policies & Standards Documentation Whether you need to pass an immediate ISO 27001 audit, resolve an urgent payment processor compliance notice, or hand off complex customer security questionnaires so your sales team can focus on closing deals, I provide the strategic oversight you need. Ready to unblock your pipeline? Click the "Book a Consultation" button on the right to schedule a focused 30-minute alignment session to review your current framework requirements and outline your remediation timeline.