SOC 2 Type II or ISO 27001 readiness lead for AWS-hosted security software company

Type: Hourly, 10 to 20 hours per week, ongoing through certification We are a US-based cybersecurity software company that needs independent third-party validation covering our application. Enterprise customers will accept either ISO 27001 certification with report, or a SOC 2 Type II report. We want a readiness lead who will tell us honestly which of those is the faster credible route for a company our size, then run it. You will not issue the opinion. We will engage a licensed CPA firm or an accredited certification body separately. Your role is everything up to and through it. Scope of work: Recommendation on ISO 27001 versus SOC 2 Type II for our situation, with realistic dates and costs for each, and a view on whether a SOC 2 Type I is a useful interim step or a distraction Gap assessment against the chosen framework Define the system boundary and scope, including which application is covered Control design and prioritised remediation plan with owners and effort estimates Update our existing policy set to reflect our current AWS environment. We hold information security, access control and business continuity policies plus architecture and data flow documentation, all written against a prior cloud provider Evidence collection process and cadence Recommendation on compliance automation tooling versus manual evidence at our size, with costs Support selecting the audit firm or certification body and reviewing engagement letters Liaison with the auditor through fieldwork Context: small team, single production environment on AWS, recently migrated. Software delivered into customer-controlled environments rather than a multi-tenant platform holding customer data. Enterprise and government customers. We have completed SIG questionnaires and are familiar with enterprise vendor risk processes. Required: Taken at least three companies through to a clean SOC 2 Type II report or ISO 27001 certificate Direct experience with AWS control environments Available to start this week