Cybersecurity & Compliance Advisory
Cybersecurity advisory, compliance preparation, and fractional security leadership. Built primarily for SaaS companies, with experience across fintech, data, and technology services. Covers SOC 2, ISO 27001, ISO 27701, ISO 42001, NIST CSF, and CSA STAR.
About
Repeat security and GRC program builder
I've been the first security hire at a company twice, building programs from zero, and have scaled three security and compliance functions into sustainable, audit-ready operations. I'm currently Director of Security & GRC at Whistic, and support additional programs in a fractional capacity.
I've run SOC 2 audits for 7 years and ISO audits (27001, 27701, 42001) for 5, mostly for SaaS companies, plus additional experience in fintech, data, and technology services.
What I do
Right-sized security guidance for seed-to-Series B companies, mostly SaaS, with experience in fintech, data, and technology services. Identify real risk, prioritize what matters, and build a program that scales as you grow.
Hands-on SOC 2 and ISO preparation (27001, 27701, 42001), plus NIST CSF and CSA STAR. Built on 7 years running SOC 2 audits and 5 years running ISO audits, mostly for SaaS companies from seed through Series B.
Fractional security and GRC leadership: the same role I've built from zero as a first security hire, twice, now available part-time for companies that aren't ready for a full-time hire.
The name
Most people just call me Honda, and there's a much more famous company with the same name. This is the other one: security and GRC programs, not cars.