and ISO 27001: controls, evidence, policies, auditors and remediation. Lead our path to the frameworks customers ask for most, including NDAA/TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP, and decide which to certify against and which to answer with documentation. Partner with sales on customer security reviews, questionnaires and … startup or scale-up. Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP. Experience selling into enterprise, government, law enforcement, defence or healthcare customers, and working closely with sales on security reviews. Technical enough ...