One senior practitioner for law firms, RIAs, and SaaS companies.
Teddy Mutterperl. The work now is the questionnaire, the renewal, or the exam on your desk, done by him.
Who you are hiring
Nine years on the other side of the audit table. Every TRM engagement is delivered by Teddy Mutterperl, start to finish. Scope and price are agreed in writing before work begins.
American Express. Senior Manager, IT and Cybersecurity Internal Audit. Auditor-in-charge across cybersecurity, cloud security architecture, network infrastructure, and third-party risk.
Deloitte. Senior Consultant, Cyber Risk (2020–2025). Cybersecurity and IT audit engagements for large financial institutions, including Bank of America. Designed an audit issue validation methodology used across a multi-year engagement. SOC 1, SOC 2, and SOX IT general controls testing for broker-dealers. Privacy program work with the Department of Veterans Affairs.
Morgan Stanley. Client Data Privacy Officer (2019–2020). Assessed cybersecurity and data privacy risk across systems supporting wealth management operations, evaluated control gaps, supported incident response, and implemented DLP controls protecting client PII.
What you get
- A scored read. A NIST CSF 2.0 maturity assessment, the gaps ranked, a 12-month roadmap, and a summary a board can read. Fixed scope, $3,000–$8,000.
- The documents the ask requires. Policies, an incident response plan, questionnaire responses, and the evidence a client, an insurer, or an examiner asks to see. Fixed scope, $3,500–$7,500.
- A named senior after that. A virtual CISO retainer when the questions keep coming: reviews, board updates, questionnaires, on-call guidance. From $3,000 a month.
If the date is sooner than a full engagement, the work is scoped to the date. If the first need is the document itself, the self-service set is on Tools, and the purchase is credited in full against an engagement booked within 90 days. A directional grade is the readiness assessment, about five minutes. Book a 15-minute call if you want it scoped to the thing on your desk.
Background
Earlier. Information Security Analyst at Namely and at MASS Communications.
Education. M.S. Cybersecurity, Yeshiva University, Katz School (2020). B.S. Information Technology and Management, Syracuse University, iSchool (2016).
A note from Teddy
Most of the firms I work with did not go looking for a security program. A client, an insurer, or an examiner asked a question they could not answer cleanly. The job is to answer that question with something that holds up, in language leadership can use.
If that is the week you are in, book a call. Fifteen minutes, no obligation. I will tell you if TRM is the wrong fit.