Adnan A. Email & Phone Number

Information security practitioner and a subject matter expert in security strategy, governance, risk, compliance, assurance and audit having diverse experience across multiple industry. Passionate about helping organizations in translating & aligning business objectives to cyber security and data privacy program, believe in secure by design and risk aware culture. A team player and focus on collaboration, team development and growth, with strong attention to detail, professional integrity and taking responsibility.Skills: • Information Systems Security Audit, ITGC Audit• Risk Assessment and Management• ISO 27001:2013 Implementation & Audit• International security standards & regulatory compliance (ISO27k1, PCI DSS, SOC2TypeII)• Security Design review and Architecture• Cloud Security Assessment • Pen test reviews and remediation, patch & vulnerability managementAchievements:• Strong leadership experience and knowledge of cloud security which helped lead green field project across Banking/Financial Institution• Led transformation projects running agile practices with regulatory and legacy constraints, covering RFP, Technical evaluation, third party security assessments, cloud security assessment for SaaS providers, Risk Assessment and Threat Modelling, reviewing master services agreement and data security clauses, end to end secure by design Lifecyle • Planned and Conducted ISMS Audit, ITGC controls audit as an Internal Auditor and supported external auditors• Planned and Implemented Vulnerability Management Program using Vulnerability Management tools (Qualys, Nessus).• Prepared organizations towards SOC 2 Type II attestation• Experienced in Implementation, Consultation and Training of ISO 27001:2013 • Collaborated with Fintech and payment service providers/merchants in PCI DSS attestationCertifications:• Certified Information Security Manager (CISM), 2012 Information Systems Audit and Control Association (ISACA), USA• Certified Information Systems Auditor (CISA), 2015 Information Systems Audit and Control Association (ISACA), USA• ISO 27001:2013 LA, 2020 IRCA UK (expired)• PCI ISA, PCI(P), 2020 PCI SSC (expired)• Microsoft Azure Fundamentals AZ-900, Security, Compliance and Identity SC-900• AWS Cloud Practitioner

Listed skills include Cisa, Auditing, It Strategy, Firewalls, and 47 others.