Skip to content

Pre-launch. We're inviting founding experts and early-access clients.

Interactive prototype: sample profiles, simulated payments and demo e-signatures. Intake requests and expert applications are sent to the Peritelos team; everything else stays in your browser.
PeritelosAdvisory
Back to experts
Vetted ProfessionalSample profile

Sofia Reyes

Security & Audit-Readiness Advisor · SOC 2 & GDPR

Permitted scope:CISSP - security advisory, no audit opinionsCISA - controls & readiness advisory, no audit opinions

Technology, Cybersecurity & DataSpecialistMiami, FL (remote)11 years experience

Available now

$275/hr

Projects from $3,500

About

Information-security advisor who prepares growing companies for SOC 2 and privacy audits: gap assessments, control design, evidence collection and liaison with the client's independent CPA auditor. Does not issue audit or attest opinions.

Industries

HealthcareSaaSEducation

Skills

SOC 2GDPRRisk assessmentSecurity policiesVendor risk

Highlights & case studies

Unverified

Highlights, past clients and other non-credential claims are provided by the expert and are not verified.

Audit-ready in 9 weeks

SOC 2 Type I readiness for a health-tech startup

Gap assessment, 40+ controls designed and evidence plan delivered.

Credentials & permitted scope

We verify that the credential exists and was in good standing on the date checked. We do not verify competence, the quality of an expert's work, or good standing after the date checked. A credential is not a recommendation or endorsement by Peritelos.

CredentialPermitted scope on PeritelosVerification

CISSP

ISC2 · DEMO-CISSP-552901

CISSP - security advisory, no audit opinionsVerified on Jul 21, 2026
How it was verified

CISA

ISACA · DEMO-CISA-20877

CISA - controls & readiness advisory, no audit opinionsVerified on Jul 21, 2026
How it was verified

Scope limits: Experts may only offer services within their credential and license. Experts must not offer audit/attest work (CPA), investment advice without registration (CFP/CFA), legal advice without a license (everyone but attorneys), or any other regulated service they are not authorized to provide. Clients should confirm that the expert's credential and scope fit their needs before engaging.

Training & experience (Unverified, provided by the expert)

  • ISO 27001 lead auditor course (completed)

Client reviews

4.9 · 1 review

Only clients with a completed, paid engagement can leave a review.

  • Verified engagement VA-1026

    “Organized, calm and thorough. Made SOC 2 feel manageable.”

    CTO, Health-tech (sample) · Jul 30, 2026