You will get all HIPAA, SOC 2, PCI DSS, and ISO 27001 Policies required to be Compliant.
Top Rated
Project details
You will get all the Policies needed for your Company to pass the SOC 2, PCI DSS, or ISO 27001 Audits. The Policies have been approved by all of the Big Four Auditing companies ( EY, Deloitte, KPMG, and PWC). I will tailor them to your Company and deliver them in less than 72 hours.
Cybersecurity Expertise
Configuration Management, Audit, Cybersecurity AwarenessTechnology Type
SaaSCybersecurity Regulation
ISO, HIPAA, PCI DSS, SOC 2What's included
| Service Tiers |
Starter
$500
|
Standard
$800
|
Advanced
$1,500
|
|---|---|---|---|
| Delivery Time | 3 days | 3 days | 3 days |
Small Company Size | |||
Medium Company Size | |||
Large Company Size |
Optional add-ons
You can add these on the next page.
Fast Delivery
+$750 - $2,000
10 reviews
(10)
(0)
(0)
(0)
(0)
This project doesn't have any reviews.
DB
Dana B.
Jul 1, 2026
Security Expert Needed — Application & Infrastructure Penetration Test (Azure)
Lazar and his team provided a very high-quality penetration test with clear, actionable findings we could immediately use to strengthen our security posture. They were professional, thorough, and easy to work with throughout the entire process. I would highly recommend them to any organization looking for a reliable and knowledgeable cybersecurity partner.
TY
Tom Y.
Jun 24, 2026
Annual Penetration Testing Saas Platform (Gray-box)
Working with Lazar several years already.
Started with just ISO 27001, for the past two years we're also doing pen test.
This is the best one stop solution for our compliance and secutiry needs.
Started with just ISO 27001, for the past two years we're also doing pen test.
This is the best one stop solution for our compliance and secutiry needs.
AH
Alex H.
Aug 20, 2025
NIST Cybersecurity Framework (CSF) High-Level Assessment
TY
Tom Y.
Aug 17, 2025
ISO 27001 internal audit
Third year working with Lazar to prepare the company for the ISO 27001 audit.
Thanks to his preparation, the audits go smoothly.
See you again next year!
Thanks to his preparation, the audits go smoothly.
See you again next year!
TY
Tom Y.
May 12, 2025
Annual Penetration Testing Saas Platform (Gray-box)
Lazar and his team found some serious flawas in our system, that has been there for years and where undetected by previous pentests carried by others. Highly recommend them!
About Lazar
vCISO & Compliance Consultant | SOC 2, ISO 27001, HIPAA, NIST, PCI
100%
Job Success
Spanish Springs, United States - 10:44 am local time
As the founder of Lazarus Security, I've led 100+ compliance engagements across frameworks including SOC 2 Type I/II, ISO 27001, HIPAA, PCI DSS, NIST 800-53, NIST 800-171, NIST CSF, GDPR, and CMMC. My clients are primarily B2B SaaS companies that need to get audit-ready fast without hiring a full-time security team. However I also manage complex compliance engagements for US public companies and Large Enterprises.
What I deliver:
- Audit readiness programs (SOC 2, ISO 27001, HIPAA, PCI DSS) from gap assessment through successful audit completion
- Internal audits with zero major non-conformities (ISO 27001 clients audited 3 years running)
- Full policy suites tailored to your business, not generic templates
- Penetration testing (gray-box, API, and web app testing) through my in-house offensive security team
- Ongoing vCISO support: risk management, vendor assessments, security awareness training, and incident response
- Security questionnaire completion (HECVAT, vendor due diligence, SIG)
My team and I work inside your existing tools (Drata, Vanta, Secureframe, KnowBe4, Slack) and coordinate directly with your external auditors so you can focus on building your product.
Ready to get compliant? Send me a message and I'll respond within a few hours.
Steps for completing your project
After purchasing the project, send requirements so Lazar can start the project.
Delivery time starts when Lazar receives requirements from you.
Lazar works on your project following the steps below.
Revisions may occur after the delivery date.
Step 1: Answer the required questionare
Answer all of the questions that are provided below, if something is not applicable to your company, answer N/A.
Step 2: First Policy Draft
I will deliver the draft policies to you.