I am a seasoned professional possessing a wealth of expertise in diverse areas including Penetration Testing, IT/IS Risk evaluation, ISMS, CIS top-18, NIST-CSF, SWIFT CSP , Compromise Assessment, Incident Response, Cloud Security and Data Privacy assessments etc.With an impressive professional tenure exceeding 8 years at PwC, I've consistently delivered services both locally and to PwC clients across the Middle East region. My qualifications include possession of CISM, OSCP, CHFI and various other industry-recognized credentials.I'm practicing prominent information security standards / frameworks including ISO 27001 and NIST. I've been entrusted with the responsibility of safeguarding critical assets for diverse enterprises. My proficiency in risk assessment allows me to meticulously analyze vulnerabilities and devise comprehensive strategies that mitigate threats. I've assisted companies in establishing robust frameworks that ensure data confidentiality, integrity, and availability.In navigating the landscape of NIST assessments, I provide invaluable insights that facilitate regulatory adherence and robust defense mechanisms. Further, I've been instrumental in conducting ISMS review gap analyses for numerous clients. My ability to distil intricate technical concepts into practical recommendations empowers businesses to not only meet compliance requirements but also stay ahead of emerging threats.Furthermore, I've executed enterprise-level pen-tests in which I've utilized a combination of automated tools and manual penetration testing techniques to scrutinize applications for potential vulnerabilities. My expertise extends to conducting meticulous reviews of IT infrastructure systems and applications, employing simulated attacks that span from initial attempts to complete compromise.My client portfolio includes industry-leading investment, commercial, and development banks, insurance corporations, financial services regulators, government, quasi-governmental organizations, container terminals, telecom enterprises, automotive, industrial manufacturing and pharmaceutical companies.My engagements also encompassed active participation in bug bounty programs, resulting in commendation and inclusion in various Hall of Fame listings for my identification of security vulnerabilities. Notably; Google, Microsoft, EC-Council, GitHub etc.Prior to joining PwC, I held the position of Penetration Tester at one of Pakistan's largest Banks. In this capacity, I undertook comprehensive security assessments employing black, grey, and white box methodologies.