Muhammad S.

A qualified professional with more than ~8 years of experience in information security, risk management, business continuity, disaster recovery, audit and compliance, corporate governance of IT and IT operations / infrastructure domains. Worked in government, services, banking & financial, and research & development sectors, with experience in: - Information Security Management System standard ISO/IEC 27001:2013 ISMS - Information security risk management based on ISO/IEC 27001, 27005, NIST SP NIST SP 800-30, 800-39 - PCI-DSS - BCP & DRP - COBIT - IT Service Management (ITIL) - EU General Data Protection Regulation (GDPR) - Development and implementation of information security – network security policies and procedures - Network, system & application security - Vulnerability management and penetration testing; Web application security - Professional Certifications: CISSP, ISO 27001 LA & LI, C|EH, CHFI, CISATrg MSc InfoSec