A practitioner who has built the controls, not only reviewed them.

SOC 2 Advisor is run by Christian Weiss, a security practitioner with 20 years of experience across network engineering, cloud and application security, identity and access management, vulnerability management and governance, risk and compliance.

Most of the work SOC 2 asks for is work I've done hands-on in operating roles: designing SSO and SCIM provisioning, building onboarding and offboarding processes with HR, writing SIEM detections, running EDR, and building an automated inventory of every account's access across an organization. I've worked in security at a law firm, investment firms and a private family office, where I owned the security program end to end.

That background shapes how I approach SOC 2. The goal is a program your team can actually run, with controls that would hold up even if no auditor were looking, and evidence that falls out of normal operations instead of a scramble every quarter.

How I work

• You work with me directly. No handoff to a junior team after the sales call.
• Fixed-scope pricing. You know the cost before work starts.
• Plain answers. If a control isn't needed for your scope, I'll tell you.
• Independence respected. I don't issue reports, and I'll help you choose an audit firm that fits.