Mohammad Hammad Ahmad Email & Phone Number

Riyadh, Sa

An extremely simple application to facilitate cyber security KPIs and identify the trends in your control landscape. Map your KPIs to multiple standards like SAMA, ISO 27001 and NCA. Very useful tool for companies who want to take action based on authentic KPI data.

I am delivering a variety of freelance services to enhance your GRC posture on various platforms such as Upwork, PeopleperHour and Freelancer.com.Its my honor to serve clients from UK, USA, KSA, Japan, Bahrain, Romania, UAE and Pakistan.The attached reviews are a testament to my professional and trusted cybersecurity services.

Saudi Arabia

Worked on SAMA CSF ML 3 AssessmentDeveloped KPIs and KRIs monitoring and measurement Conducted cyber security reviews to assess controls maturityUpdated SAMA CSF documentation in alignment with business objectivesDeveloped Third Party Risk Assessment program

Islamabad

• Performed ITGC gap assessment of microfinance bank and conducted data classification of business data.• MMBL BCP review and gap assessment. Delivered support in remediation and compliance• VAPT of web applications and android app using customized VAPT methodology.• Conducted risk assessment of a microfinance bank and delivered customized training on risk management to IT security team.• Developed customized training for State Bank of Pakistan Enterprise Technology Governance & Risk Management (ETGRM) Framework for IT team of Telenor microfinance bank.• PCI DSS audit for Bank Al Bilad (KSA). • Vulnerability assessment and penetration testing project management covering networks, systems and applications for MMBL.• Development of ISO 27001 documentation for international insurance company in KSA.

Islamabad, Pakistan

• Audited project management office PMO practices of major bank in Pakistan.• Performed gap assessment against ISO 27001• Developed training material for risk management, internal audit and BCP/DRP training. • Trained internal audit team of regulatory body on ISO 27001.• Developed policies and procedures for government bank against requirements of State Bank of Pakistan Enterprise Technology Governance & Risk Management (ETGRM) Framework.• Risk assessment of microfinance bank IT environment and payment gateway.• Executed IT audit of Pakistan largest G2P program and covered applications, IT general controls and IT infrastructure controls

Lahore, Pakistan

• Performed risk assessment for PCI DSS compliance• Conducted online ISO 27001 LI training for clients in Romania.• Delivered GDPR gap assessment project • PCI DSS reassessment of client's Cloud IaaS.• Gap assessment and road map development for PCI DSS compliance of a micofinance bank.• Worked on RCSA (risk control self- assessment) methodology for achieving operational resilience.• Performed vulnerability assessment using Nexpose for PCI DSS.

Delivering information security training and soft skills development courses on behalf of following companies. The Knowledge Academy (UK)Information Security Academy (Pakistan)Consuldesk (India)Cyber security training delivered successfully are - CISSP - CISM- Information security awarenessSoft skills training delivered are # Leadership & Motivation# Customer Service# Train the trainer

Riyadh

Managed security programs (ISO27001) compliant and delivered top management with risk assessments and cost benefit analysis. Lead teams of programmers and security professionals for successful delivery of information security solutions.• Performed company-wide risk management.• Performed risk assessment of clients following NIST 800.• Managed the implementation of, and compliance with, the Information Security Policies and Procedures.• Designed products security policies in compliance with FIPS 140-2.• Implemented vulnerability management strategy.• Deployment of PKI (Public Key Infrastructure).• Completed projects like secure phone, secure USB flash drive and hardware tokens. • Designed and developed NIST FIPS level 3 compliant Hardware Security Module (HSM) .• Developed and conducted client training programs.

Islamabad

• Managed teams for development of Key Management System for Public Key Infrastructure.• Assisted clients on implementation of Link Encryptors infrastructure.• Cooperated with clients to improving security processes and introduce best business practices for ensuring security compliance.• Implemented Elliptic Curve Cryptography on FPGA.• Incorporated SNMP v3 using Cypress chip in various cryptographic devices for secure remote management .• Designed security architecture for Data Distribution Service using Group Key Encryption.

Islamabad

Experienced in all phases of secure products development from the conceptual stages to high volume production release of FPGA Based Designs. Designed and developed cryptographic algorithms, hardware interfaces and user interfaces on Xilinx latest FPGAs. Various projects are1- Involved in application specific processor designs on FPGA.2- Designed and developed USB, touch screen and smart card interfaces on Microblaze (FPGA).3- Developed software applications in C++ and C# for testing and verification of cryptographic algorithms.4- Involved in research related to bit stream security, hardware security and Intellectual Property (IP) security.5- Incorporated SNMP (Simple Network Management Protocol) v3 in various cryptographic devices.6- Designed security architecture for Data Distribution Service using Group Key Encryption.7- Auditing devices for FIPS 140-2 compliance and generating reports for harware design changes or enhancing security policies.

Master'S Degree, Computer Engineering; Computer Engineering, Cgpa 3.45

MS THESIS TOPIC : Reconfigurable ECC Processor Design and Implementation on FPGA In this thesis ECC computations are divided into point.

Master Of Business Administration - Mba, Business Administration And Management, General, 3.85

MBA with strong focus on management topics like Strategic management, change management etc. Final Thesis : Critical Factors.

Bachelor Of Engineering - Be, Computer Engineering, 81%