Retainer capacity is full until mid-2027.Fixed-scope projects available on request.
Freelance Collaboration - This Could Be You
Governance, Risk and Compliance
Cyber is too broad for one person to cover properly. SteadySec is looking for an independent practitioner - a freelancer, not an employee - to own governance, risk, and compliance: ISO 27001, NIS2, and supplier assurance for governance-heavy engagements. You keep your own practice and your other clients. If this is your craft, let's talk.
The Collaboration
What you would own
You would be the governance lead, turning frameworks and regulation into a security programme SMEs can run, and the person clients trust to keep compliance practical and defensible.
ISO 27001 readiness
Guiding SMEs from scattered controls to a working ISMS: scope, risk treatment, Statement of Applicability, and the evidence auditors expect.
NIS2 & supplier assurance
Scope clarification, supplier due diligence, and the board-level reporting that regulated engagements demand.
Policy & risk treatment
Policies people follow, risk registers that drive decisions, and review cycles that keep them alive.
Audit & evidence
Preparing organisations for certification and customer audits with evidence that stays light enough to keep current.
Why SteadySec
How we would work together
This is a partnership. You own the governance craft; Petr owns technical strategy and the client relationship. Together the firm covers governance and technical work with equal depth.
Your name on the work
Clients know exactly who is guiding their ISMS, and your reputation grows with the firm's.
You stay independent
Freelance by design: per-engagement, fractional, or a deeper partnership over time. You keep your own practice and clients. What matters is that you own the area and deliver senior-grade work.
Systems that get used
We build management systems that are used in everyday business decisions and stay current between audits.
Let's Talk
Think this is you?
Send a short note about the engagements you have led and how you like to work. No formal application, no cover letter - just a real conversation between practitioners.