Who We Are
About Sage GRC
Sage GRC is the consulting and advisory arm of Sage Audits LLP. We help companies get audit-ready, strengthen their controls, and build compliance programs that hold up. Headquartered in Westminster, Colorado. Working with clients nationwide.
Book a Free 30-Minute Consultation
01 · Our Background
Backed by Sage Audits LLP
The same standards of rigor that govern our attest work stand behind every consulting engagement.
Sage GRC operates under Sage Audits LLP, a licensed CPA firm founded in Colorado with a focus on IT audit and assurance. Our team brings experience from Big Four firms and industry-side roles, covering everything from large public company SOX programs to first-time SOC 2 audits for early-stage SaaS companies.
We started Sage Audits to bring high-quality audit and advisory work to organizations that typically could not access that level of expertise without paying large firm rates. Sage GRC is the consulting side of that mission: helping companies prepare, strengthen, and build so that when the audit comes, it goes smoothly.
Our consulting and advisory services operate independently from our attest work to maintain professional independence. We cannot perform attest and consulting services for the same client simultaneously, but we can help you prepare and then refer you to independent assurance resources, including our SOC 2 services at wesoc2.com.
02 · Managing Partner
Jordan Novak
Sage GRC & Sage Audits LLP
Jordan leads Sage Audits LLP and Sage GRC. His background spans IT audit, information security, and compliance work at leading professional services firms, with deep experience in SOC 1 and SOC 2 reporting, SOX ITGC assessments, and GRC program development for SaaS and tech-forward organizations.
He has worked inside the Microsoft 365, Azure, AWS, and Google Cloud environments that his clients run, which means he knows what good controls look like in practice, not how they appear in a policy document.
Jordan holds the CPA, CISM, CISSP, CISA, CRISC, and CITP designations and brings Big Four training to every engagement. His approach is practical: identify what matters, fix what is broken, and make sure your team understands why it matters before the auditors arrive.
CPA · CISM · CISSP · CISA · CRISC · CITP
Book a Consultation with Jordan03 · Leadership
Managing Director
Our Managing Director brings deep expertise in IT audit and cybersecurity from large-scale engagements across financial services, healthcare, and technology sectors.
Focused on application controls, vendor risk, and IT governance program development. Experienced across complex enterprise environments including multi-cloud, hybrid infrastructure, and regulated industries.
CISA
View Full Team on Sage Audits
A note on independence
Sage Audits LLP performs formal attest services (SOC 1, SOC 2, and other examinations) as a licensed CPA firm. Professional independence standards require that attest and non-attest consulting services not be performed for the same client at the same time. Sage GRC consulting engagements and Sage Audits attest engagements operate separately to maintain this independence. If you need both, we can help you sequence the work and connect you with the right resources at the right time.
Ready to work with us?
Book a free 30-minute consultation and tell us about your compliance goals. We will help you figure out where to start.