Comprehensive ISO 27001 and SOC 2 Compliance and certification

Job ID: 40347221

Budget: ₹1,500 – ₹12,500 INR

Title: Urgent: ISO 27001 & SOC 2 End-to-End Compliance, Certification (All-Inclusive Cost Required)

**Description:**

We are a fast-growing startup looking for an experienced compliance consultant or agency to handle **end-to-end implementation AND certification** for:

* ISO 27001 (ISMS + certification)
* SOC 2 (Type I initially, with roadmap to Type II)

**Important:** We are specifically looking for **all-inclusive proposals**, including:

* Consulting fees
* Tooling costs (if any)
* **Audit & certification costs (mandatory to include)**

---

**Scope of Work:**

The selected freelancer/agency will be responsible for:

1. **Gap Assessment & Readiness**

* Current state assessment
* Gap analysis for ISO 27001 & SOC 2
* Remediation roadmap

2. **Policy & Documentation**

* Complete ISMS documentation
* Risk assessment & risk treatment plan
* Security policies (access control, incident response, etc.)

3. **Implementation Support**

* Control implementation support
* Process alignment
* Tooling setup (if applicable)

4. **Audit Preparation**

* ISO 27001 Stage 1 & Stage 2 readiness
* SOC 2 Type I audit readiness
* Evidence collection support

5. **Certification & Audit Management (Mandatory)**

* Engage and coordinate with accredited certification bodies
* Manage end-to-end audit process
* Support during audits
* Closure of audit findings
* Deliver final certification (ISO 27001 + SOC 2 Type I report)

---

**Timeline:**

* Immediate start required
* We are targeting a **highly accelerated timeline**
* Vendors must clearly specify:

* Time to SOC 2 Type I certification
* Time to ISO 27001 certification
* What can realistically be achieved within **1–3 weeks (readiness vs certification)**

---

**Budget & Pricing (Mandatory Breakdown):**

Proposals **must include a detailed cost breakdown**, including:

1. Consulting / implementation fees
2. Compliance tools (if required)
3. **ISO 27001 certification audit cost (Stage 1 + Stage 2)**
4. **SOC 2 audit cost (Type I)**
5. Any ongoing / recurring costs

Proposals without certification cost breakdown will not be considered.

---

**Requirements:**

* Proven experience delivering ISO 27001 and SOC 2 end-to-end
* Ability to include and manage **certification via accredited auditors**
* Experience with startups / SaaS companies preferred
* Strong cloud knowledge (AWS/GCP/Azure)

---

**To Apply, Please Include:**

* Past similar projects (with timelines)
* Sample cost breakdown from previous engagements
* Approach for accelerated compliance
* Whether certification cost is included or partnered
* Auditor partnerships (if any)

---

**Goal:**

We are looking for a **single accountable partner** who can deliver **from zero → certification**, including **all associated costs and audit coordination**.

---