🎓 Certified Lead Auditor in ISO/IEC 27001:2022 and ISO/IEC 42001:2023
🔐 (ISC)² Candidate pursuing Certified in Cybersecurity (CC)
💼 GRC Consultant specializing in Risk, Compliance, and ISMS Implementation
🌍 Open to Remote & International Relocation
I help organizations achieve information security excellence through:
- ISO 27001 & ISO 42001 implementation and certification
- Governance, Risk, and Compliance (GRC) framework design
- Risk assessments and internal audits
- Penetration testing and vulnerability management
- AI governance and responsible AI implementation
GRC & Compliance:
- ISO 27001 & ISO 42001 Lead Auditing
- Risk Assessment & Management
- Internal Audit & Reporting
- Policy Development
- Compliance Documentation (GDPR, NIST, COBIT)
Information Security:
- Penetration Testing (Web, Mobile, Network)
- OWASP Top 10 Methodology
- Vulnerability Assessment
- Security Control Testing
- Incident Response
AI Governance:
- AI Risk Management
- Responsible AI Implementation
- AI Ethics & Compliance
- AI Lifecycle Control Frameworks
- 🏆 ISO/IEC 42001:2023 Lead Auditor - Mastermind Assurance (2025-2028)
- 🏆 ISO/IEC 27001:2022 Lead Auditor - Mastermind Assurance (2025-2028)
- 🏆 (ISC)² Candidate - Active Member
- 🏆 API Penetration Testing - APIsec University
- 🏆 Cisco Cybersecurity Pathway - Cisco Networking Academy
GRC Consultant - Cyborts (July 2025 - Present)
- Conducted ISO 27001 gap analyses for multiple SMEs
- Built risk management frameworks reducing audit prep time by 40%
- Designed ISO 42001 AI Management System controls
Information Security Analyst - Virtual Security (Aug - Oct 2024)
- Performed penetration testing on 15+ applications
- Identified 47+ vulnerabilities improving code security by 60%
IT Support Engineer - Big DB Solutions (Apr - Dec 2024)
- Monitored endpoint security for 200+ systems
- 🔍 ISO 27001 Implementation Toolkit
- 📊 Risk Assessment & Register Templates
- ✅ Compliance Audit Checklists
- 📋 Information Security Policies
- 🤖 AI Governance Framework
- 🛡️ Penetration Testing Reports
Tools: Nmap, BurpSuite, Wireshark, OWASP ZAP, Frida, DumpIt
Programming: Python, SQL, HTML, CSS
Frameworks: ISO 27001, ISO 42001, NIST CSF, GDPR, COBIT
Systems: Windows Server, Linux (Ubuntu, CentOS)
Roles: Information Security Analyst | GRC Analyst/Consultant | Risk Analyst | Compliance Analyst | Cybersecurity Analyst | IT Risk Analyst | Junior Auditor
Location: Remote & Onsite
Status: ✅ Open to Work |
⭐️ "Transforming cybersecurity and compliance challenges into measurable business improvements"
💼 Available for: GRC Consulting | ISO Auditing | Risk Assessments | Penetration Testing | Compliance Projects