Muhammad Emal Khan Email & Phone Number

United Kingdom

London, England, United Kingdom

Adding to my responsibilities I had been moved to the UK to cater to the UK and EU regional needs to meet the information security and compliance gaps.

Lahore, Punjab, Pakistan

As a member of the information security leadership team, I led the development and implementation of a robust 'Afiniti Securiti' program that covered all aspects of information security, privacy, and GRC and its related practices aligning security policies with the company's strategic objectives.Partnered with inter-company teams spread across 5 continents.

• Managing and administering information security and compliance practices in Systems Limited and Visionet Systems Inc. globally. Working with the global team to ensure successful information security practices.
• Leading with the implementation of information security policies and procedures for compliance with ISO 27001 security standards, PCI DSS… Show more Managing and administering information security and compliance.
• Leading with the implementation of information security policies and procedures for compliance with ISO 27001 security standards, PCI DSS Standards, and other regulatory standards and guidelines
• Conducted internal SSAE 16, ISO 27001, and PCI DSS audit
• Working in the development of a holistic approach to all compliance standards such as ISO 27001, PCI DSS, SSAE 16, and ISO 9001 & CMMi.
• Ensure compliance with service industry standard of SSAE 16 (aka SAS 70)

• Implementation and overlooking of information security practices in TRG/ IBEX globally. Work closely with the global team to ensure the effectiveness of TRG/ IBEX Global’s information security program. Performing.
• Leading with the implementation of information security policies and procedures for compliance with ISO 27001 security standards, PCI DSS Standards, and other regulatory standards and… Show more Implementation and.
• Leading with the implementation of information security policies and procedures for compliance with ISO 27001 security standards, PCI DSS Standards, and other regulatory standards and guidelines
• Conducted internal PCI DSS and ISO 27001 audit for all TRG global sites which involves frequent travels to the USA, Philippines, and other global sites.
• Worked in the development of PCI Compliant applications.
• Initiation of service industry standard of SSAE 16 (aka SAS 70) and US Safe Harbor laws

MCB House

• Implementing information security strategy and addressing compliance with regulatory bodies, PCI-DSS, ISO 27001, BASEL II EFT guidelines, SBP (Central Bank of Pakistan) information security policies, standards and.
• Monitoring compliance with the organization’s information security policies, procedures, standards and guidelines among employees, contractors, alliances, and other… Show more Implementing information security strategy.
• Monitoring compliance with the organization’s information security policies, procedures, standards and guidelines among employees, contractors, alliances, and other third parties to refer and escalate the non.
• Providing written reports on all issues regarding non-compliance to information security policies and procedures.
• Providing expert security involvement in the lifecycle of business and infrastructure projects including architecture reviews, application design, penetration testing and vulnerability scanning.
• Assisting in maintaining frameworks for security risk management, disaster recovery and business continuity.

• Major Role in definition, documentation, implementation, training of policies & procedure and requirements for the security standard. Actively working to establish organization-wide security standards (Payment Card.
• Developing a comprehensive security program to establish Information Security
• Assist in IT Security Strategy development and implementation
• Formulation and implementation of information security policies… Show more Major Role in definition, documentation, implementation, training of policies & procedure and requirements for the security standard. Actively.
• Formulation and implementation of information security policies, standards, procedures, and guidelines
• Actively working on implementation and roll out of enterprise wide vulnerability management, Antivirus, Antispyware

• Played major part in CMMI (Capability Maturity Model Integrated (CMMI) v 1.2 Level 2) based process definition, documentation, implementation, training and institutionalization of processesResponsibilities:
• Performed process Internal Auditing, monitoring of software processes and work products
• Have performed software quality control and testing activities
• Implementation assistance and training of US Policy & Regulations such as Anti Money Laundering (AML) activity… Show more Played major part in CMMI (Capability Maturity Model Integrated (CMMI) v 1.2 Level 2) based.
• Implementation assistance and training of US Policy & Regulations such as Anti Money Laundering (AML) activity, Regulation-P based on the Gramm-Leach-Bliley Act 1999 and Regulation-E based on the Electronic Funds.
• Member of Software Engineering Process Group (SEPG)Key contributions:

Masters Business Administration, Management Information Systems

Bachelor In Computer Science (Honuors), Software Engineering

Intermediate, Pre-Engineering

O Level, Igcse

Ibm Guardium Technical Enablement

Education record

Iso 27001 Lead Auditor