The Part 107 remote pilot certificate belongs to a person, never to a company. It covers the shooter who earned it, and if your second shooter is the one manipulating the controls on a paid job, he needs his own. There's no business-level FAA license to buy.
The pieces that sit around it: the knowledge test at an FAA-approved testing center runs about $175 per sitting, and the certificate carries a recurring currency requirement you satisfy with free online training. Aircraft get registered individually, a small fee per drone, and current drones have to broadcast Remote ID. Confirm the fees and the current requirements on the FAA's own site, since these do get revised.
Insurance is a separate track. The FAA doesn't require it. Clients do. Brokerages commonly want a certificate of insurance showing liability limits, often $1M, and some want the brokerage named as an additional insured. Drone liability is sold either as an annual policy or by the hour through app-based providers, and coverage on the aircraft itself (hull) is priced separately from liability.
What catches new operators is airspace rather than paperwork. Plenty of ordinary suburban listings sit inside controlled airspace around an airport, and flying there needs authorization, usually through LAANC, which is automated and comes back in seconds through an approved app. If the grid square over that address has a ceiling of zero feet, you don't get an instant approval and you can't legally shoot it that morning. Pull the address up before you quote the job.