Mary

Information Security & Compliance Consultant

Cisco • ZZP

Jan 2020 - Present • 6 yrs 6 mos

Led end-to-end information security, cybersecurity governance, and regulatory compliance projects for clients across healthcare, SaaS, cloud computing, fintech, manufacturing, e-commerce, logistics, and technology sectors. Worked closely with executive leadership, IT teams, developers, DevOps engineers, and compliance stakeholders to design, implement, and maintain security management systems aligned with international standards and regulatory requirements. Delivered ISO/IEC 27001:2022 Information Security Management System (ISMS) implementation, transition, internal audits, gap assessments, risk assessments, Statements of Applicability (SoA), security policies, procedures, asset management, supplier security, incident response planning, business continuity, disaster recovery, and audit readiness programs. Supported organizations in achieving compliance with SOC 2 Type I & II, HIPAA, HITRUST, PCI DSS, ISO/IEC 27701 Privacy Information Management, ISO/IEC 27017 Cloud Security, ISO/IEC 27018 Cloud Privacy, ISO 22301 Business Continuity, ISO 20000-1 IT Service Management, ISO 42001 AI Management Systems, NIST Cybersecurity Framework (CSF), NIST SP 800-53, CIS Controls, GDPR, Saudi PDPL, UAE Data Protection Law, and other global cybersecurity and privacy regulations. Performed enterprise risk assessments, vendor and third-party security evaluations, security awareness programs, vulnerability management reviews, access control assessments, security documentation development, compliance monitoring, internal audits, management reviews, corrective action management, and certification preparation. Collaborated with certification bodies, external auditors, and regulatory authorities to ensure successful compliance outcomes while helping organizations strengthen cybersecurity resilience, reduce operational risk, and build customer trust.