Wordpress developer - Custom code mess

I've got a custom wordpress website that does event bookings. it has a lot of events, etc. and it needs to be updated, maintained, page updates, code updates, and implement strong security protocols. It was recently hacked/malware, but should be OK now. Start today.