Incisive, quality-driven cybersecurity and privacy professional offering 13 years of expertise in delivering robust security programs and services to safeguard government and private enterprises at every touchpoint. A visionary who translates ever-evolving cyber risks into innovative business roadmaps while continually honing the entity’s security maturity and excelling at synergizing people, processes & technology around proactive defenses.CORE COMPETENCIES- Proactive Leadership & Problem Solving- Teamwork, Quality Assurance & Maturity- Security Architecture & Engineering- Identity & Access Management- SecOps, VAPT (On-premise/Cloud)- Governance, Risk, Compliance (ISO 27K, SOC2, PCI, GDPR)- Network Security- Program Management- Data Privacy & Security- Secure SDLC, DevOps & Security integration- Cloud Security- Incident ManagementTECHNICAL SKILLS- MS Office, Windows, RHEL, CentOS, AWS, Azure, GCP, Alibaba Cloud, JumpCloud, Google Workspace- Data Classification, DLP, SIEM, EDR, NGFWs, Web/Email Security- IAM & PAM- Threat Modeling, VAPT- ISO27k, ISO27701, HIPAA, GDPR, SOC2, PCI DSS, CIS v8, OWASP Top 10, ITIL v3, PayNet, SWIFT, Bank Negara Malaysia- Application & Network Security TestingACCOMPLISHMENTS- Led 6 teams and effectively implemented a proactive incident management program within record 6-month duration.- DPIAs for 8+ profitable projects.- Completely & efficiently managed external audits (SOC, ISO, HIPAA, GDPR) for 10+ customers with 100% passing rate (SP360).- Made, reformed and employed actionable security best practices for customers’ on-premise and cloud infrastructures counting AWS, Azure, GCP, Office365, JumpCloud and Google Workspace resulting in 95% visibility and improved security posture, consequently, enabling the customers to pitch their newly ripened security program as a valuable sales enablement tool (SP360).- Successfully created and implemented an internal due care and due diligence client assurance audit program within Afiniti while enhancing the current security posture visibility of Afiniti by 95% to CSO.- Efficiently identified vulnerabilities with 95% accuracy, which enabled internal application development team at WASL UAE to mitigate critical risks within Software Development Lifecycle.- Provided centralized, comprehensive dashboards and reporting to Abu Dhabi Municipality UAE’s management against the software risk in an organization. - Aided Saudi Aramco’s management in translating the business requirements into functional technical policies within DLP system with 100% success.
Listed skills include Firewalls, Gap Analysis, Information Security, Itil, and 37 others.
