Umar Khalid Email & Phone Number

Bukit Jalil, Kuala Lumpur, My

✓ Lead Compliance, Certification & Audit activities pertaining to Information Security.✓ Develop and implement a strategic, long-term information security strategy and roadmap to ensure that MobilityOne’s information services and assets are adequately protected as per company’s risk appetite.✓ Identify, evaluate and report on information security risks, practices and projects to the C-Suite and the GRC Steering Committee, and provide expertise on security standards, regulations and best practices (e.g., SOC II, PCI, ISO 27001, NIST, CIS, Bank Negara Malaysia etc.).✓ Develop, mentor, and manage a high performing staff of information security professionals.✓ Ensure that the security management program is in compliance with applicable laws, regulations, and contractual requirements.✓ Act as the champion for the enterprise information security program and foster a security-aware culture.✓ Oversee the evaluation, selection and implementation of information security solutions that are innovative, cost-effective, and minimally disruptive.✓ Partner with enterprise architects, infrastructure, and applications teams to ensure that technologies are developed and maintained according to security policies and regulations.✓ Build and oversee enterprise-wide strategic and tactical programs for:• Incident and Breach Management, IAM, Architecture and Engineering, Operations, Assessments, GRC, DevSecOps✓ Develop business metrics to measure the effectiveness of the security management program✓ Monitor the industry and external environment for emerging threats and advise relevant stakeholders on appropriate courses of action to maintain acceptable cyber risk posture.✓ Liaise with the law enforcement and other advisory bodies as applicable by Bank Negara Malaysia to ensure that the organization maintains a strong security posture.✓ Oversee and lead the creation, communication and implementation of a process for managing vendor risk and other third-party risk.

- Planning, developing, executing, and tracking the effectiveness of security measures to protect information, computer systems, and network and cloud infrastructure across customers.- Designing security strategies and engineering comprehensive cybersecurity architectures for on-premise and/or cloud environments.- Performing manual penetration tests for web applications, servers, networks, and cloud environments.- Performing security reviews for cloud services, including AWS, Azure, GCP, Office365, JumpCloud and Google Workspace etc.- Researching infrastructure and architecture weaknesses and finding ways to counter them.- Identifying, defining, and documenting security requirements and recommending solutions.- Installing/configuring solutions that monitor systems and networks for security breaches and intrusions.- Monitoring systems for irregular behavior and setting up preventive measures.- Educating and training customers on information security “best practices”, as well as implementation in customer’s environment.- Performing incident response activities to support and coordinate efforts during ongoing cybersecurity incidents.- Finding cost-effective solutions to cybersecurity problems.- Performing risk assessments and manage GRC using proven methodologies.

Hamilton, Bermuda, Bm

- Develop a good understanding of Afiniti business processes, Afiniti application and deployment process.- Responsible for due care and due diligence audits for Afiniti.- Schedules and plans audits; initiates project planning, assess risk and develops audit direction.- Participates in development, implementation and maintenance of policies, objectives, short-and long-range planning; develops and implements projects and programs to assist in accomplishment of established goals.- Support in third party IS assessment process for Afiniti. Conduct internal IS audit for customer deployment before the initiation of customer IS audit.- Highlighting contractual requirements for different business units of Afiniti. Understanding of ISO 27001, SOC2, ITGC and PCI DSS standards.- Supporting GRC team in policy modification, procedure development of ISO 27001, PCI DSS, SOC2, ITGC and internal security baselines as per emerging business requirements.- Participation in awareness session, developing awareness for different internal teams on security requirement for evidence gathering on ISO 27001, SOC2, ITGC and PCI DSS audits.

New York, Us

- Manage 3rd party Governance, Risk, Compliance, perform risk assessments and audits, technical security assessments of applications and infrastructure as well as security design reviews.- Perform application and infrastructure penetration tests, as well as physical security review and social engineering tests.- Review and define requirements for information security solutions.- Perform security reviews of application designs, source code and deployments as required, covering all types of applications (web application, web services, mobile applications, thick client applications, SaaS).- Participate in Security Assessments of networks, systems and applications.- Work on improvements for provided security services, including the continuous enhancement of existing methodology material and supporting assets.

Karachi, Sind, Pk

Oversee the creation and management of security governance strategies, policies and standards. Achieve risk management objectives as per organizational risk appetite. Execute projects constituting information security programs (control design and development). Steer risk assessments as well as security audits, and perform incident management for public and private business customers. Bolster Information security awareness among new/existing business clients by devising innovative and specific training regimens.

Karachi, Sind, Pk

Appointed to develop, implement and document formal security programs for domestic and international customers including Tier-II technical support for enterprise-security products, evaluate new security products including proofs of concept and pre-sales support for various accounts.