About Us
Who We Are
Just like the meridian lines that provide orientation on a map, Meridian GRC Consulting helps organisations make sense of complex regulatory and assurance challenges. We work with growing and mid-sized businesses to turn security and compliance requirements into clear, practical steps that improve resilience, lower risk, and build trust with stakeholders.
We help organisations understand and meet recognised standards, regulatory rules, and assurance needs. Our goal is to make complex requirements clear and manageable, so you can feel confident in your results.
Meet the Director
Marty Carter is Director of Meridian GRC Consulting Ltd and an Information Security Consultant specialising in governance, risk, and compliance. He helps organisations develop governance, risk, and compliance programmes that are practical, measurable, and audit-ready.
As an ISO/IEC 27001 Lead Auditor and Drata Technical Certified practitioner, he supports organisations across technology, SaaS, and regulated sectors in building structured governance, managing risk, and demonstrating assurance through evidence-based practices. His work includes supporting organisations through SOC 2 Type 2 readiness, supporting SaaS organisations in high-pressure audit readiness engagements, and guiding clients through complex certification programmes, including dual ISO/IEC 27001 and ISO/IEC 42001 initiatives.
He recently guided a company through a complete ISO/IEC 27001:2022 implementation and certification programme, achieving certification with zero non-conformities.
His work prioritises clarity, precision, and operating models that withstand independent review.
What We Do
Our services span governance, risk, and compliance advisory, including:
Governance structures and security oversight.
Risk assessment and risk-based decision-making.
Compliance readiness and assurance preparation.
Security programme and control design.
Audit readiness and ongoing compliance support.
In every project, we focus on making the scope clear, using evidence to support our work, and applying controls consistently.
Our Purpose
Security, risk, and compliance requirements are growing across different industries and regions. Many organisations struggle not because the rules are impossible to meet, but because they are often unclear, scattered, or hard to prove.
Meridian GRC Consulting exists to bring clarity and assurance to compliance. We help organisations understand what is required, implement proportionate controls, and demonstrate compliance with confidence. Our goal is to reduce uncertainty, help you make better decisions, and achieve results you can trust.
Our Principles
Our work is guided by a consistent set of principles:
Clarity: Translating complex requirements into clear, actionable guidance.
Integrity: Acting with transparency, independence, and professional accountability.
Assurance: Enabling organisations to demonstrate control effectiveness and compliance with confidence.
Precision: Applying proportionate controls with accuracy and attention to detail.
Our Approach
We base our approach on clarity, integrity, and precision. By working closely with leaders and technical teams, we help interpret standards and regulatory requirements and translate them into practical governance, risk, and compliance programs.
We give equal attention to assurance and implementation. Our controls are built to be effective, measurable, and defensible, with evidence that auditors, regulators, and customers can trust. This helps ensure compliance is consistent, sustainable, and matches business goals.
Who We Work With
We help growing and mid-sized companies in technology, SaaS, professional services, and regulated industries. Our clients include those getting ready for their first certification or audit, as well as those looking to improve or expand their security and compliance programs.
Many of the companies we support work in fast-paced settings and have limited security resources. That’s why we focus on clear priorities, practical advice, and solutions that fit their needs.
Clarity and Assurance in Compliance
Clarity and assurance in compliance reflect how we support organisations at every stage of their security and compliance journey.
We support organisations at every stage of their security and compliance journey by providing clear guidance and assurance. We help clients understand what they need to do, implement controls that fit their environment, and demonstrate compliance that withstands external review.
We use structured governance, risk-based decisions, and evidence-based assurance to help organisations move past uncertainty and work confidently in complex regulatory settings.
If you have any questions, please feel free to contact us.