Sahil Dubey
SOC 2 · USA · AWS

SOC 2 consultant for US startups on AWS — audit-ready in weeks.

SOC 2 Type 1 & Type 2 readiness with the controls actually built in your AWS account and the evidence automated. Zero-finding outcomes, led by a CISA + AWS Solutions Architect Professional with 16+ years in fintech, SaaS and healthcare.

Book a free 30-min callEmail me

What you get

Gap assessment

  • Map your AWS environment to the Trust Services Criteria (CC1–CC9)
  • Prioritized remediation roadmap — what to fix, in what order
  • Scoping that keeps the audit tight and the cost down

Controls on AWS

  • IAM least-privilege, MFA, IRSA; CloudTrail + Config org-wide
  • KMS encryption, Secrets Manager rotation, GuardDuty/Security Hub
  • Change management + CI/CD security gates that satisfy CC7/CC8

Evidence automation

  • AWS Config conformance packs → continuous evidence
  • Automated collection so Type 2 observation is low-effort
  • Dashboards your team and the auditor both trust

Audit support

  • Auditor walkthrough — I speak both engineer and assessor
  • Coordinate with your CPA firm end to end
  • Re-test and close findings fast

Proof

0findings — SOC 2 Type 2 (AI lending, 2024–25)
8–14 wktypical time to audit-ready
100%Upwork job success (Top Rated Plus)
SOC 2 Type 1/2AWS ConfigCloudTrailIAMKMSGuardDutyTerraformEKSEvidence automation

FAQ

How long does SOC 2 readiness take?

Most mid-market AWS environments reach audit-ready state in 8–14 weeks; Type 2 then needs the 3–12 month observation window, front-loaded so it's uneventful.

Type 1 or Type 2?

Type 1 attests design; Type 2 attests operating effectiveness over time. Most enterprise buyers require Type 2 — I get you Type 1 ready fast, then automate evidence.

Do you run the audit?

The report is issued by an independent CPA firm; I deliver readiness — gap assessment, AWS controls, evidence automation and auditor walkthrough.

Why a CISA + AWS architect?

Because SOC 2 controls must be real in the account. IAM, CloudTrail, Config and KMS map to the TSC, built so an assessor traces evidence in minutes.

Pass your SOC 2 the first time.

Free 30-minute call — tell me your timeline and current AWS posture.

Book a callAWS DevOps services →