Muhammad Hassan Khalid Email & Phone Number

Dubai, United Arab Emirates

Audit and Gap-Assessment against multiple Cybersecurity frameworks and standards including UAE-IA, SAMA, NCA ECC, NIST, ISO 27001Data Classification and Data Governance Framework developmentIT Service Management and Business Process Improvement ConsultancyRisk Assessment for Information Technology and Critical Operational Technology Organizations

Somerset, New Jersey, United States

Writing comprehensive assessment findings and propositions for system security enhancement.Ensuring compliance with relevant standards such as HIPAA/HITECH,ISO 27001, PCI-DSS.Developing Audit Plans, training Information Security Audit team and conducting ISO 27001 Internal Audits for monitoring performance of information security controls.Liaising Audit visits by contacting Department Heads of concerned area and externalSurveillance Auditors.Finalizing Internal Information Security Audit reports and presenting in Management Review Meetings.Working with the business units to ensure the achievement and maintenance of appropriate securitycontrols.Verifying that systems are developed and maintained in line with company security policies.Assessing IT control elements to mitigate IT risks regarding confidentiality, availability and integrity of Information.

Markham, Ontario, Canada

Monitoring the IT security standards and mitigating the cyber attacks in line with CIS TOP 18 best practices requirements.Identification of relevant controls and controls objectives and performed readiness reviews for attestation engagement.Managed the team responsible for controls implementation and fulfilled the assignment on time and in budget.Defining the IT security policy and controls in line with ISO 27001 as well as Cloud security and PII security controls in line with ISO 27017 and 27018.Information Security Policy writing in line with ISO 27001.Applying cybersecurity risk assessment and managing IS risks in line with ISO 27005 procedure.Analyzing the existing cyber security mitigation strategies and assessing controls to gauge theireffectiveness.Consultation regarding the Test of Design (TOD) and Test of Effectiveness (TOE) for Information security controls.Identifying weaknesses in security system and performing controls' Gap Assessment.Writing Audit reports detailing the non-conformities and observations.Business acumen to assess the consequences of cyber threats on business and its continuity.Thorough knowledge of sector-specific cyber threat vectors and threat surfaces.Holistic understanding of IT Security Framework including PCI DSS, ISO 27001 and NIST.Understanding of High Level Design and Low Level Design Architecture to gauge the Data Flow through network.

Lahore, Pakistan

• Overseeing Fiber surveying and equipment installation of IP cameras• Drafting access control policies for different departments• Log monitoring, reporting and special reports compilation• Digital forensics and analysis of digital evidence• Resource allocation and ensuring Business Continuity and Disaster Recovery operations• Tackling emergency situations via liaison with parallel departments• Supporting and facilitating operations of integrated command and control center of Lahore• Attending meetings and participating in project management and policy-making tasks• Training and mentoring of communication officers and helping prepare the training materials

Frf Building Lahore

• Drive Testing and signal strength analysis using TEMS Investigation tool• Hands-on experience of 2G and 3G drive testing and insight exposure to LTE drive testing• Corporate Communication and Complaint handling to corporate clients• Analysis of Log Files to identify the RF parameters and maintaining relevant KPI’s• Field Trips to maintain quality assurance across the region

Bachelor Of Engineering - Be, Electrical And Telecommunication, 1St Division

Activities and Societies: Institute of Electrical and Electronics Engineering (IEEE) Telecommunication and Computer Networking Discussion.

High School Diploma, Science, 1St Division

Activities and Societies: Literary Circles and Deliberation Activities Callisthenics and Athletics Activities