I put the security in myself.
I work with mid-sized companies that have outgrown doing security on the side. I harden the accounts and laptops you already have, then stay on as your security lead. When an auditor, a customer questionnaire or an insurer asks how you’re protected, you have real answers.
Book a free consultMicrosoft 365 or Google Workspace hardening
Four areas, in the tools you already pay for. I sign in and configure each one myself, and you see every change.
Identity
MFA
Everyone signs in with a second factor. Phishing-resistant methods for the people attackers go after first.
Admin accounts
Admin rights move to separate accounts that only get used for admin work.
Conditional access
Sign-ins from unmanaged devices or unusual places get challenged or blocked.
Device
Device baseline
Every laptop meets the same settings before it touches company data.
Disk encryption
Laptops are encrypted, so a lost one does not become a data problem.
Platform
Platform configuration
Microsoft 365 or Google Workspace set up the way it should be, not the way it shipped.
Alerting
Risky sign-ins and new mail forwarding rules reach a person instead of a log nobody reads.
Data
Data protection
Sharing, labelling and retention set so company data stays where it belongs.
What you have at the end
A hardened tenant, a plain record of what changed and why, and settings that hold up when someone asks for evidence.
Ongoing vCISO
Once the base is solid, I stay on as your part-time security lead. One person who already knows your setup, every time.
GRC platform
Your risks, controls and progress in one place, so progress is reportable and the goal is achievable.
Policies
Written from the controls you really run, so they match reality when someone reads them.
Questionnaire answers
I answer customer security questionnaires with you and keep the answers consistent from one to the next.
Audit support
SOC 2 or another framework when you need one. I gather the evidence from controls that already work.
Leadership updates
A plain-English summary for leadership and the board: what changed, what is still open, what I would do next.
What you have at the end
A security lead who knows your company, and answers ready before a customer, auditor or insurer asks.
How working with me runs
Talk
A free consult. You tell me what is pushing you: a deal, an audit, an insurer, or a hunch. I tell you where I would start.
Harden
I configure the pieces myself in your Microsoft 365 or Google Workspace, and walk you through each change.
Stay on
I stay as your security lead for as long as it helps, and keep the build in shape as you grow.
Start with a free consult
Tell me what is pushing you. I have spent 12 years running the controls auditors ask about, and I will tell you plainly where I would start.