Muhammad Umer Farooq Awan CISA,CPTP,CEH,MSc InfoSecurity

A skilled and accomplished career-oriented professional / consultant with more than 13+ years experience in Information Systems Audit / Security Management & Operations / Analysis and Penetration testing. Have the ability to serve as a corporate security leader by ensuring strategic security planning, managing execution, and achieving results while complying with variety of security standards such as ISO:27001/NIST CSF/ GDPR. University of Greenwich – M.Sc Computer Security and Audit (*Awarded Distinction) • Hands-on experience ranged from generating initial concepts to making policies, evaluating the risks and existing controls to recommending system security parameters. • Proven ability in vulnerability assessment and penetration testing • Team player, capable of contributing ideas to both technical and business audiences Specialties: Governance • ISO:27001 complete coverage (Implementation planning & execution, running operations) • Internal audit of variety of ISO implementations • GDPR-General Data Protection Regulation (Compliance planning & execution, running operations) Data Privacy risk and impact assessments, breach response planning and handling • Information Security Risk Management and Compliance • Policies / Procedures development and policy implementation Operations • SOC (Deployment planning and execution, designing and running SOC operations, incident triage, false positive tuning, designing use cases and anomaly detection etc.)SIEM IBM QRadar | McAfee SIEM • Security Hardening and base-lining of IS Infrastructure on-Site | on-Cloud • NGFW / SIEM / IPS / DLP/ MDM /Endpoint solutions / Identity solutions / Cloud tech.etc. • Cloud Security SaaS | IaaS • Integration knowledge of security technologies for Cloud Security • Information Systems Auditing (Network Security | Systems Security | Applications Security) • Vulnerability Assessment and Penetration-Testing (Ethical Hacking) BCP | DRP • Business Continuity and Disaster Recovery