I will conduct iso 27001 internal audit and gap analysis
ISO 27001 Lead Auditor, SOC 2, GDPR and IT Security Compliance Specialist
About this Gig
Preparing for ISO 27001 certification without knowing your gaps is expensive. Auditors will find them better if you do first.
I'm a certified ISO/IEC 27001:2022 Lead Auditor with 10+ years of IT security experience. I assess your posture against all 93 Annex A controls and deliver a clear picture of what needs to change before your certification audit.
What you get:
Basic: Annex A gap checklist + written findings summary
Standard (+ Basic): Full gap report, SoA draft, remediation roadmap, 30-min call
Premium (+ Standard): 3 policy templates for top gaps, 60-min call + async support
Why me:
- ISO/IEC 27001:2022 Lead Auditor certified (Mastermind Assurance, 2025)
- 10+ years managing IT security for 500+ user environments
- Deliverables that hold up under auditor scrutiny
Message me before ordering if unsure which package fits.
Device:
Desktop
•
Laptop
•
Server
•
Other
Operating system:
Windows
•
Linux
•
Other
My Portfolio
Other Support & IT Services I Offer
FAQ
What is a gap analysis and why do I need one?
A gap analysis compares your current security controls against ISO 27001:2022 requirements. It tells you exactly what's missing, partially implemented, or already compliant — so you fix the right things before your certification audit.
Do you work against ISO 27001:2022 or the old 2013 version?
I work against ISO/IEC 27001:2022. If you're still on the 2013 standard, I can flag transition gaps as part of the assessment.
What do I need to provide to get started?
A brief overview of your organization, any existing security policies you have, and your target certification timeline. The more context you provide, the more useful the output.
How is this different from the actual certification audit?
A gap analysis is an internal assessment to identify weaknesses before the formal audit. Certification is done by an accredited external body. My deliverable prepares you for that — it does not replace it.
Can you help after the gap analysis?
Yes. I can assist with policy development, control implementation, or a follow-up assessment. Message me to scope what's needed.

