Cyber Security Specialist (ISO27001, DORA, GDPR, Cyber Essentials, SOC 2, NIST & GRC)
 

​

​

​

 Specialists in SOC 2 auditing and Governance, Risk, and Compliance (GRC). Assisting businesses—both in the UK and Europe based and other international regions—in strengthening their security posture by offering tailored solutions, policy enhancements, risk assessments, and compliance management. With a focus on helping businesses and start-ups become cyber-ready for UK and European markets. Delivering practical and effective cyber security strategies to ensure compliance and protection against evolving threats.

​

​

​

​

Services Offered

​

​

​

1. Governance, Risk, and Compliance (GRC) Services

• ISO 27001 Auditing:

  • Conduct internal audits and pre-certification readiness assessments.

  • Prepare comprehensive audit reports and recommendations.

• Policy and Governance Development:

  • Create, review, and improve information security policies.

  • Establish governance frameworks aligned with ISO 27001, GDPR, or other regulations.

• Risk Assessments:

  • Identify, evaluate, and prioritise organisational risks.

  • Develop risk treatment plans and mitigation strategies.

​

​

​

2. SOC 2 Auditing and Compliance

• SOC 2 Readiness Assessments:

  • Help organisations prepare for SOC 2 Type 1 and Type 2 audits.

  • Review and implement controls for Trust Services Criteria, including security, availability, processing integrity, confidentiality, and privacy.

• Audit Support:

  • Assist businesses in gathering evidence and streamlining audit processes.

  • Identify gaps and provide actionable recommendations to achieve SOC 2 certification.

• Policy and Process Development:

  • Create tailored policies, procedures, and controls to meet SOC 2 requirements.

  • Enhance existing processes to align with audit best practices.

​

​

3. Helping Businesses and Start-ups

• Cyber Readiness for the UK, US & Europe:

  • Assist businesses in meeting compliance standards such as GDPR, ISO 27001, and SOC 2.

  • Provide tailored security solutions to ensure a smooth expansion into UK, US and European markets.

• Compliance and Market Adaptation:

  • Align security and privacy policies with EU/UK/US regulations.

  • Advise on technical and procedural controls to meet regional requirements.

• Security Awareness and Training:

  • Deliver bespoke training for distributed teams adapting to European security standards.

​

​

​

4. Cyber Security Advisory and Strategy

• Cyber Security Reviews:

  • Comprehensive assessments covering governance, risk, compliance, and technical vulnerabilities.

  • Actionable recommendations for enhancing security posture.

• Training and Awareness Campaigns:

  • Design and deliver staff training to improve physical and cyber security awareness.

  • Focus on phishing, social engineering, and compliance best practices.

​

​

5. Content Creation and Knowledge Sharing

• Blog and Website Contributions:

  • Author articles, guides, and resources on cyber security topics, available at Iyanifa Cyber Security.

• Dictionary and Library for Cyber Security:

  • Develop accessible resources for understanding cyber security terminology and research.

​

​

​

Industries Supported

• SMEs across various sectors, including software development, critical infrastructure, and e-commerce.

• Start-ups and businesses expanding from the US into UK and European markets.

​

​

​​

​

Why Work With Me?

• Expertise in helping businesses navigate UK and European, US cyber security requirements.

​