Raheel Iqbal - Principal Security Architect - Cism, Crisc, Mcp, Ceh, Swift, Klcp, Ccna Cyberops Email & Phone Number

Karachi, Pk

Princeton, New Jersey, Us

Driving innovation and strengthening security frameworks as a Principal Security Architect at Veraqor, I lead the design and implementation of comprehensive security solutions that align with organisational goals and industry best practices.Key Responsibilities & Achievements:Architecting Security Solutions: Designed and deployed scalable, secure architectures to protect cloud environments, applications, and data.Regulatory Compliance Leadership: Spearheaded compliance initiatives across the Middle East region, ensuring alignment with frameworks such as NDMO-PDPL, SAMA Cybersecurity Framework, and NCA guidelines.Cloud Security Expertise: Leveraged advanced tools and platforms to fortify cloud infrastructures, including Microsoft Azure, against evolving cyber threats.Risk Management & Mitigation: Conducted risk assessments and threat modeling to proactively identify and address potential vulnerabilities using frameworks like STRIDE and MITRE ATT&CK.DevSecOps Integration: Promoted a shift-left security approach, embedding secure coding practices and automated testing within CI/CD pipelines.Strategic Collaboration: Partnered with cross-functional teams across the Middle East to tailor solutions that meet local regulatory, cultural, and operational requirements.Thought Leadership: Delivered insights on cyber security trends, challenges, and strategies in Middle East conferences and industry panels.

New York, Ny, Us

As the Head of Product Security, my primary responsibility is to ensure the comprehensive security of the organization's products and systems throughout their entire lifecycle. This entails conducting thorough risk assessments, fostering collaboration across cross-functional teams, and implementing robust security measures. These measures encompass secure coding practices, rigorous code reviews, and the seamless integration of security features. I perform detailed product security reviews using advanced tools such as Semgrep, Burp Suite, and GitGuardian to identify and mitigate potential vulnerabilities. I remain vigilant, staying abreast of emerging threats and regulatory requirements, and I establish and enforce security policies and guidelines to safeguard our organization.In my role, I oversee a wide spectrum of security domains, including application security, cloud security, privacy protection, risk management, infrastructure security, and DevSecOps. This comprehensive approach ensures that all facets of our organization are adequately protected. I also manage and execute security projects, ensuring they are completed on time and within budget while meeting all security objectives.In the event of security incidents, I assume a leadership role in orchestrating response efforts and coordinating with all relevant stakeholders. Additionally, I actively promote a culture of security awareness within the organization through training initiatives and active engagement with the broader security community. Ultimately, my overarching goal is to safeguard the integrity of our organization's products, protect sensitive data, and cultivate and maintain the trust of our valued customers by upholding stringent security practices and adhering to industry standards.

New York, Ny, Us

• Designing, building, implementing and supporting enterprise-class security systems• Aligning organizational security strategy and infrastructure with overall business and technology strategy• Identifying and communicating current and emerging security threats• Designing security architecture elements to mitigate threats as they emerge• Planning, researching and designing robust security architectures for IT projects• Performing vulnerability testing, risk analyses and security assessments• Providing supervision and guidance to security team• Defining, implementing and maintaining corporate security policies and procedures• Regularly communicates vital information, security needs and priorities to top management

Bella Vista, New South Wales, Au

In my capacity as the Department Head for Cybersecurity, Risk, and Privacy, I oversee a range of critical Client projects and assume leadership for various departmental responsibilities. These include:Project Oversight: Managing projects across several domains, including:• PCI DSS Assessment• SWIFT CSCF Assessment• Business Continuity• Comprehensive Cybersecurity Assessments, encompassing frameworks such as NIST CSF, ISO 27001, AED 8, SAMA CSF, CIS Top 20, FFIEC, and more.• Development of the Risk Management Framework and IT Risk Assessments.Departmental Leadership: Directing the department involves ensuring:• Cost Optimization• Cultivation of Strategic Business Partnerships• Facilitation of Process Improvement and Business Transformation• Chairing the IT Steering Committee in collaboration with various clients.• Presenting Progress Reports to the Board of Directors' Audit Committee.Adaptive Strategy:Continuously adapting our department's strategy to align effectively with the evolving needs of the business as it expands its global footprint.Relationship Management:Establishing and nurturing relationships with Business Unit CIOs and their teams to ensure alignment and collaboration on security initiatives.Third-Party Relationships:Ongoing management of key 3rd party relationships and contracts to enhance our security posture.Cybersecurity Training Programs:Developing and executing cybersecurity training programs, including those focused on SWIFT, IT Audit, and Ethical Hacking, to enhance the knowledge and skills of our teams.In my role as the Department Head, I am dedicated to ensuring the security, risk management, and privacy compliance of our organization while fostering collaborative relationships and driving continuous improvement in our processes and security measures.

Provide Cyber Security and IT Audit Training which includes,CEHIT AuditCRISCIncident Management

Dubai, Uae, Ae

Participate in lead engagements, identifying and managing clients IT risks and assessing controls that help mitigate those risks.Managing clientele for leading Financial Institutre to conduct SAMA Cyber Security Framework review, Risk Assessments.Managing Hospitality Clientele to conduct PCI-DSS assessment in KSA and region.Subject Matter expert in IT Risk Assessment, Cyber Security Assessment, Business Continuity and IT DR.

London, Gb

• Participate in lead engagements, identifying and managing clients IT risks and assessing controls that help mitigate those risks• Manage the financial aspects of client engagements and communicate significant issues, fees, and estimates-to-complete to partners and client• Help partners generate new business opportunities and build client networks and relationships• Actively identify opportunities to better serve clients• Develop people through effectively supervising, coaching, and mentoring all levels of staff• Conduct performance reviews and contribute to performance feedback for all levels of staff• Contribute to people-related initiatives including recruiting, retaining and training Risk professionals• Participate in Forensic investigation for clients using EncaseProject Manager for SBP Enterprise Technology Governance & Risk Management Framework Advisory for Leading Bank

Karachi, Sindh, Pk

Visiting Faculty at NED for MS Information Security course..Course: E-Commerce Security

• Configuration and Management of McAfee SIEM (NITRO)• Configuring and Managing FIREEYE Advance Malware Protection (2400 Series)• IT Audit• Perform Security & Risk Based Audit• Perform System Hardening & Vulnerability Mgmt• Developing Policies, Standards and Processes• Perform penetration testing, application testing, web application security assessment, onsite internet security assessment, social engineering, wireless assessment, and IDS/IPS hardware deployment.• Perform Network Design Assessment

Toronto, Ontario, Ca

Currently working as Supervisor- Information Security Team at Trillium Information Security Systems with job responsibilities of managing information security teams and maintaining proper support levels for Pakistan and international countries. Looking closely at technical and pre-sales level the Information Security product-lines of IBM Qradar SIEM, IBM APPScan, Kaspersky Endpoint Security, and Rapid7 Nexpose and Metasploit, . Enabling the internal teams and our partners to be able to understand the products technically and be able to pitch to the prospective customers and be able to provide level one support. Helping our clients in implementing ISMS, doing vulnerability and penetration testing and also providing security related trainings.

Worldwide, Oo

• Conduct IT-Security Assessments / Penetration Tests such as web/application and infrastructure testing, wireless network testing, VoIP, network devices and firewall rule set review.• Good knowledge of open source, freeware, and commercial vulnerability assessment tools. (Nessus, OWASP and Qualys guard)• Experience with penetration testing frameworks (Metasploit)• Working and designing security information management systems• In depth knowledge of anti-virus, malware and desktop tools• Advance Knowledge of Operating System Security Control and Applications (Windows, Unix, SQL, and Oracle).• Advanced Knowledge of Perimeter controls security (IDS/IPS, SIEM, Data Leakage, Firewall, Mail/Gateway security, AV, Proxies, VPN's and Zoning).• Adequate knowledge of PCI/DSS• Understanding of the function Security in the ISO-27001 structure.• Conduct IT Security Consultancy for clients • Conduct IT Audit for clients • Provide IT infrastructure consultancy to different clients• Provide IT Forensic consultancy to clients • Conduct Application load testing for clients• Member of Deloitte Pakistan Security Team• Managing local NAS, LAN, VPN, WAN and Intranet for Deloitte Pakistan• Managing Active Directory, Microsoft fileserver, TMG, SCCM, Exchange Server 2010, WSUS Server, Lync Server, Sharepoint Server• Configuring and Managing virtualization (VMware Workstation , ESXi Server and Hyper-V)• Involve in PM-40 IT Maturity Assessments (Deloitte Global Standard) and reporting to Deloitte Global information Security Office UK• Reporting to Deloitte Global USA Infrastructure team for infrastructure issues related to PK OU• Managing IT inventory and procurement

• Involved in ERP implementation (Oracle ERP).• Linux(Ubuntu , CentOS), Microsoft(XP,2007, 2003 & 2008 Server), Apple (MAC OS) support• Microsoft Exchange server configuration and maintenance• Wireless Access point configuration and maintenance• Manages all system back-up and restore protocol. • VMware configuration and support (ESXi , VMware)• SharePoint administration , support and maintenance• Disaster recovery of all server and ESXi machines • Network & System Administration• AD & ISA installation and maintenance (Policy making)• Linksys router configuration and maintenance• Network Printer configuration and installation• Documents network problems and resolution for future reference. • NAS (Network Area Storage) configuration and maintenance• Openfire server for Enterprise ChatServer• OfficeSip server administration and client support• Network trainings• Windows Deployment service • LAN & VPN (Installation & Configuration)• Network and Backup Policy making• EyeOS configuration and management

Karachi, Sindh , Pk

• Install, configure & maintain hardware, systems, software, network services and devices.• Supports administration of servers and server clusters.(Active directory , ISA Server)• Manages all system back-up and restore protocol. • Plans and supports network and computing infrastructure.• Perform troubleshooting analysis of servers, workstations and associated systems.• Manage user accounts, permissions, email, anti-virus, anti-spam.• Linux (Ubuntu , CentOS ,) and Microsoft OS (XP,2007, 2003Server, 2003Server) support• Print management & Auditing.• VM Ware configuration and testing.• VoIP Configuration (X-lite ,Zoiper & Twinkle configure and testing)• Network Helpdesk optimization• Skype centralize chat logging• QoS for Voip and Bandwidth management• Wireless router configuration and installation

• System (Installing , Maintaining , Troubleshooting)• Network (Physical and logical infrastructure & troubleshooting as well)• Routing (Installing, Maintaining , Troubleshooting)• Active Directory & Mdaemon (Installing , Maintaining , Troubleshooting)• (Installing , Maintaining , Troubleshooting)• Wireless (Install wireless Router , Switches , Access Point & Print Server)• ISA , Proxy & web Server Management• IBM system X Server Certified Engineer

working as Trainee System and Network Support

Nuremberg, Bavaria, De

Job Description:• Back up Lead, taking care of all issues of team members collecting production report and give assistance to them. • Research and obtain knowledge on latest IT products belonging to categories that have been assign.• Develop technical specifications of IT and electronic devices.• Ensure quality and quantity of technical data produced per production schedule.• Coordinate production forecast, manufacturer/category and SKU prioritization with Manager.• Communicate suggestions on enhancement of technical standards and procedures that should be followed by the production and quality assurance department. • Preparation, Management and sharing of MIS related sensitive reports and business information.

Ms, Network & Telecommunication

Diploma, Networking

Bs, Computer Science

Bcs(H), Computer Science

Fsc; B.I.S.E Hyderabad With "B; Science) From B.I.S.E Hyderabad, Pre-Engineering

Ceh V8, Information Security

Ibm Certified Associate - Endpoint Manager V9.0 - C2010-508, Patch Management

Ceh V9, Ethical Hacking

Ccna Cyber Ops, Security Operation Center

Splunk Certified User, Siem