Book a call

Foundations your business needs.

Zero-hassle advice.Zero-touch integrations.Zero-Trust native.

Mandatory helps early-stage companies stand up AI-native InfoSec and Compliance functions using modern IT tooling and processes from day one, prioritizing auditable, automatable infrastructure-as-code rather than configuring by hand.

Start a conversation See pricing
Built by an operator, not a firm

Run by someone who's built these functions from the inside.

Engagements run as flat monthly retainers across three tiers, each scoped by a short SOW, so the work stays disciplined and your roadmap stays realistic.

Advisory that's actually useful

Expert guidance on IT, Security, Compliance, and AI implementation, including feedback on your own product if you're building in this space.

Hands-on when you need it

Not just slides and frameworks; real configuration work across your productivity, IT, Security, Finance, HR, and Legal stack.

Built to scale with you

Continuous tuning and operational ownership as your systems mature, not a one-time setup that goes stale.

Infrastructure as code

Systems are stood up as versioned, automatable infrastructure-as-code, so every change is auditable instead of buried in untracked dashboard clicks.

About

Hi, I'm Frank Manda.

I've spent 10+ years building IT, Security, and GRC functions in healthcare, fintech, and digital marketing orgs, often from zero and often while the company was growing fast. I started out behind the Genius Bar at Apple 5th Ave. in New York (the "cube"), and the work since has taken me from endpoint fleets to a FedRAMP authorization.

I've been the buyer you're selling to, and I specialize in standing up Zero-Trust identity and device programs from zero. Mandatory is how I help early-stage companies build the operational and compliance foundations enterprise customers expect.

Frameworks I've worked with
FedRAMPSOC 2 Type IIHIPAAHITRUSTISO 27001SOX
See my LinkedIn
Track record
  • Ramp
    IT Site Lead (contract), Apr to Sep 2026

    Led an AI-native helpdesk deployment that reached 80%+ tier-1 AI resolution, built AI automation for user and group lifecycle management and SaaS orchestration, and was the sole IT representation for the San Francisco headquarters.

  • Abridge
    Head of IT, Oct 2024 to Dec 2025

    Founded the IT, Ops, and GRC org from zero and scaled it through 3x company headcount growth, from 150 to 500+. Secured a FedRAMP Accelerated ATO, one of the fastest granted at the time, and kept SOC 2 Type II and HIPAA attestations clean.

  • GoodRx
    Director of Corporate IT, May 2023 to Aug 2024

    Scaled IT across 9 offices as the company grew from 900 to 1,200+ employees, demonstrated $400K (33%) in savings in the first quarter through SaaS spend optimization, and led HITRUST readiness while keeping SOC 2 Type II and HIPAA clean under SOX audits and an FTC consent order.

  • Tala
    Director of Global IT, Jan 2019 to Jun 2022

    Built the Global IT and InfoSec functions, standardizing tooling and processes across the US, India, Kenya, Mexico, and Philippines offices. Led ISO 27001 certification end-to-end with clean results and a successful maintenance audit.

  • VaynerX
    IT Systems Manager, Jan 2015 to Jul 2018

    Scaled the endpoint environment from 350 to 900+ devices across New York, Los Angeles, and a new London office.

Engagement tiers

Three tiers, priced to match what the work actually takes.

Advise

10 hours base
$5,000
per month
Expert advisory on IT, Security, Compliance, and AI implementation, plus feedback on your own product if you're building in this space.
  • //Phone, video, or in-person (travel billed separately)
  • //Monthly SOW sets priorities within the 10 hours
  • //Diligence & vendor evaluation lives here

Implement

Starting at
$10,000
per month
Hands-on-keyboard integration of the systems you've selected into a working environment.
  • //Productivity, IT, Security, Finance, HR & Legal stack setup
  • //Config against tools you've already chosen
  • //Includes product development advisory

Enhance

Starting at
$20,000
per month
Your fractional CIO/CISO, covering ongoing optimization and maintenance of existing systems and processes, including anything built in Advise or Implement.
  • //Continuous tuning, not one-time setup
  • //Operational ownership across your stack
  • //Includes product development advisory
Tools & platforms

Already fluent in the stack you're choosing between.

Pick a category to see some of the tools we're already hands-on with today, and those we can help you evaluate against.

How hours work

Disciplined by design.

  • //Advise includes 10 hours/month, scoped by that month's SOW. Hours do not roll over.
  • //Implement and Enhance are scoped by that month's SOW instead of a fixed hour count, so the engagement can flex to match the work.
  • //Need more Advise hours, planned in advance? Bundle additional hours upfront at a discount, e.g., 20 hrs/mo at a reduced blended rate.
  • //Need more, unplanned? Ad hoc hours beyond the monthly bundle are billed at a premium over the base rate.
Contact

Let's talk about what you're building.

Tell us what you're standing up, securing, or getting ready to have audited. We'll help you work out which tier fits and what the first month should cover.

Email

hello@mandat0ry.com

Send an email

Based in the San Francisco Bay Area. Calls by phone or video, or in person (travel billed separately).