Upwork home
Sign up
Project Catalog
DesignDesign
Video & AudioVideo & Audio
Development & ITDevelopment & IT
MarketingMarketing
Writing & TranslationWriting & Translation
MoreMore

You will get a simplified 3rd party risk assessment

Joe R.Status: Offline
Joe R. Joe R.
5.0
Rising Talent
Preview image

Let a pro handle the details

Buy Cybersecurity Management services from Joe, priced and ready to go.
Joe R.Status: Offline
Joe R. Joe R.
5.0
Rising Talent
Preview image

Let a pro handle the details

Buy Cybersecurity Management services from Joe, priced and ready to go.

Project details

Most security questionnaires overwhelm IT teams with 150+ yes/no questions that provide little insight. I offer a smarter, streamlined questionnaire designed to be completed and reviewed in a timely manner . My approach uses a concise, thoughtful questionnaire that uncovers real-world risks, governance gaps, and maturity without the noise. I analyze responses, identify red, and deliver a clear, client-ready report with actionable recommendations.
Cybersecurity Expertise
Risk Assessment, Gap Analysis, Cybersecurity Awareness
Cybersecurity Regulation
ISO, NIST Cybersecurity Framework, SOC 2

What's included $200

These options are included with the project scope.

$200
  • Delivery Time 2 days
5.0
1 review
100% Complete
(1)
1% Complete
(0)
1% Complete
(0)
1% Complete
(0)
1% Complete
(0)

JT

Justin T.
5.00
Dec 1, 2025
Information Security Consultant for Growing Company Great job! Listened, delivered, and explained things clearly. Very responsive!
Joe R.Status: Offline

About Joe

Joe R.Status: Offline
Technology Veteran - Cybersecurity & Enterprise Operations
5.0  (1 review)
Dupo, United States - 2:44 pm local time
My name is Joe R. and I've been working in technology my entire life. I've worked across the entire tech stack, including data centers, routers, switches, firewalls, servers, storage, virtualization, and most mainstream applications you would expect in enterprise environments.

As my career progressed, I began working more in security and compliance. So when I deploy enterprise solutions I do so with the monotonous (but necessary) side of technology: Governance, Security, Compliance, and Regulation.

Given my strong technical background, I’ve always been effective at taking policy, procedure, and legal language and translating the technology behind it to ensure we meet requirements for both clients and governments. I also work closely with legal counsel to ensure our documentation and positioning accurately reflect the underlying architecture and systems in use.

What I do

Application and platform modernization: orchestrate rebuilds, migrations, and integrations. Align release management, operational readiness, and change control so launches stick.

Cloud and infrastructure: hybrid cloud design, Office 365 consolidation, identity, virtualization, networking, and ITSM (ServiceNow) implementation at enterprise scale.

Security and compliance (practical, not performative): ISO 27001, SOC 2, NIST/CMMC, GDPR/CCPA. I bridge legal and policy language to real systems and workflows.

Program and vendor leadership: unify cross-functional teams, establish governance, dashboards, and reporting for executives and boards.

Technical due diligence and post-incident reviews: identify risks, integration challenges, and concrete remediation steps.

Recent work snapshots

Led multi-subsidiary technology programs covering security, modernization, and change management. Reported to the Board and standardized a five-year roadmap.

Directed IT operations and application integrations for global agencies with more than 5,000 employees, including major Office 365 consolidation and ServiceNow automation.

Built and guided a guest-rewards platform in the vacation rental space, including product strategy, offshore development management, versioning, and governance.

Partnered with legal teams on GDPR and CCPA alignment, DPIAs, DPAs, SCCs, incident response, and evidence-based post-mortems.

How I can help (common engagements)

Map business objectives to architecture and a phased delivery plan with clear KPIs.

Stand up or improve ITSM (ServiceNow), release runbooks, and SRE-style operations for stability.

Prepare for ISO 27001, SOC 2, NIST, or CMMC, or streamline existing programs without adding red tape.

Lead cloud and app migrations, identity hardening (MFA and SSO), Zero Trust baselines, and data protection controls that teams can actually maintain.

Perform technical due diligence for M&A or post-incident root cause analysis with actionable fixes.

Technologies and domains
Hybrid cloud, networking (LAN/WAN, VLAN, QoS), virtualization (ESXi and vCenter), storage and backup, identity and access, Office 365, ServiceNow, SIEM, MFA, encryption, business continuity and disaster recovery.
Governance, risk, and compliance: ISO 27001, SOC 2 Type 2, NIST and CMMC, GDPR and CCPA, HIPAA, SOX. Policy drafting, DPIAs, DPAs, SCCs, risk registers, and board reporting.

Steps for completing your project

After purchasing the project, send requirements so Joe can start the project.

Delivery time starts when Joe receives requirements from you.

Joe works on your project following the steps below.

Revisions may occur after the delivery date.

Client makes contact

Please message me first so I can provide questionnaire

Questionnaire is provided to client

Review the work, release payment, and leave feedback to Joe.