Skills
Governance, Risk & Compliance
Cybersecurity policy & standards development
Risk, gap, and maturity assessments
Regulatory compliance (ISO 27001, ADHICS, NIST-aligned practices)
Third-party/vendor security risk oversight
Information asset governance
Data governance advisory
Security Operations
Vulnerability management (identification, prioritization, remediation tracking)
Incident response
Threat and risk analysis
Security impact analysis
Business Continuity & Resilience
Business continuity management (BCP)
Disaster recovery planning
Corrective action tracking
Leadership & Reporting
KPI/KRI development
Executive & steering committee reporting
Team management (led teams of 1–5)
Stakeholder engagement (business, legal, compliance, regulatory)
Awareness & Training
Security awareness program design and delivery (scaled to 6,000+ users)
Technical Tools
Burp Suite Pro
Tenable
Qualys
Certifications-backed Skills
ISMS Lead Auditing (ISO/IEC 27001:2013)
Data privacy solutions (CDPSE)
IT security audit
About
-21 years in IT, 16 in cybersecurity — spanning healthcare, banking, and technology sectors (Canada, UAE, India)
- Governance & policy focus — developing, enforcing, and maintaining security policies, standards, and procedures across organizations
- Risk & compliance — leading risk assessments, security impact analyses, and regulatory compliance programs (ISO 27001, ADHICS, NIST-aligned practices)
- Vulnerability & incident management — owning enterprise vulnerability programs and incident response planning
- Third-party/vendor oversight — setting security requirements in contracts and service agreements
- Program leadership — briefing executive/steering committees, running security awareness training for thousands of users, managing small teams (1–5 people)
- Certifications — ISO 27001 Lead Auditor, CDPSE (ISACA), ITP, Business Continuity Specialist
Profile Photo
