Security Consultant with over 18 years of practical enterprise security experience, specializing in strategy, policies, governance, technology, risk management, and team development.Extensive experience in information security, particularly in auditing and assessing ISMS, BCMS, and ITSMS. I provide consultancy and implementation services for ISMS, BCMS, and ITSMS, and conduct audits for TÜV-Nord accredited certification bodies against ISO 22301, ISO/IEC 27001, and ISO 20000 standards. Additionally, I am a member of Panel SC 27, the Iranian committee responsible for the ISO 27000 standards.Key Technical Skills and Accomplishments:Information Security Program Development: Planned, developed, and implemented a comprehensive company-wide information security program from scratch, based on the ISO 27001 security framework.Penetration Testing and Audits: Successfully led the completion of multiple third-party penetration tests and audits, including ISO 27001 and CIS.Policy and Procedure Development: Authored and implemented new information security policies, procedures, and standards in alignment with ISO 27001 and business requirements.Technical Leadership: Established and chaired the Information Security Steering Committee (ISSC), comprising company executives and directors.Risk Management: Expert in identifying, assessing, and mitigating security risks through robust risk management frameworks.Technology Integration: Proficient in integrating advanced security technologies to enhance organizational security posture.Compliance and Certification: Extensive experience in achieving and maintaining compliance with international standards such as ISO 22031, ISO/IEC 27001, and ISO 20000.