Muhammad Shoaib Email and Phone Number

• Information security program development for telecom domain• Development, implementation and maintenance of information security policies, procedures and baseline controls for telecom domain• Assets based information security risk assessment of telecom domain• Identification, implementation and evaluation of technical and administrative controls to mitigate information security identified risks• Formulating and evaluating technical requirement of information security related controls for procurement purposes e.g. SIEM, Vulnerability management• Regular compliance audits to check effectiveness of implemented controls as per the guidelines of China Mobile

• SIEM reporting, event correlation, SIEM use cases implementation using IBM QRadar.• Conduct risk assessments, vulnerability assessments and diagnose internet/extranet security, intrusion attempts. • Supporting incident responses for all security-related issues.• Information security governance.• Evaluate Information Security policy compliance, including internal and external audit initiatives for overall effectiveness.• Research and understand emerging information security threats, vulnerabilities, and their countermeasures.• Information security training and awareness.

Major Responsibilities • Evaluate, design, develop, implement and / or integrate security solutions that include SIEM, Vulnerability Management• Work with product owners, business stakeholders, business analysts and engineering teams to review security requirements and approve / modify designs as needed.Incident management• Evaluate Information Security policy compliance, including internal and external audit initiatives for overall effectiveness.• Document, design, deploy and maintain security systems to protect company assets and information while being compliant with applicable federal, state and commercial security standards.• Leading all initiatives related to audits, certifications and other compliance efforts including HIPAA/HITECH, PCI-DSS, ISO27001.• Vulnerability assessments, and penetration tests for WEB applications and Network Equipment.• Mobile application penetration testing for MTBC’s mobile applications.

• Responsible for carrying out technical IT audits.• Responsible for conducting vulnerability assessment.• Responsible for conducting network and mobile application penetration and security test.• Conducting a risk analysis for identification of threats and vulnerabilities within information systems, and to mitigate the gaps identified using NIST and ISO methodologies. • Managing and deployment of Security Information and Even Management (SIEM) solution using SolarWinds LEM.• Collecting and reviewing access logs and report anomalies in the operating system, database, network and application layers based on company’s information security policies, procedures using SIEM solution.• Domain System End Point Security implementation/audit using GFI end point security solution.• Ensuring that the company meets applicable statutory and industrial standards like HIPAA and ISO 27001.• Performing Lead internal auditing, Lead implementer and policy writer services for ISO 27001:2005-2013.• Lead internal auditor for ISO 9001:2005.

Network administration support for both LINUX and windows based systems. Successfully implemented LINUX based proxy server and Open Source Network management system assigned as internship projects.