Riaz

Cybersecurity Lead Consultant/Auditor

Joushen • Freelance

May 2025 - Present • 1 yr 3 mos

• Conduct cybersecurity governance, risk, and regulatory compliance assessments for organizations in Saudi Arabia. • Perform gap assessments against NCA Essential Cybersecurity Controls (ECC). • Review information security policies, procedures, governance practices, and technical security controls. • Assess security control design, implementation, effectiveness, and compliance maturity. • Identify cybersecurity risks, control gaps, and regulatory non-compliance issues. • Recommend risk-based remediation and security improvement actions. • Support development and improvement of information security policies, procedures, and compliance documentation. • Prepare cybersecurity audit, risk, and compliance reports for management and regulatory stakeholders.

Information Security Specialist

Webb Fontaine • Fulltime

Nov 2023 - Present • 2 yrs 9 mos

• Lead information security, cybersecurity risk, compliance, and security assessment activities for the Bangladesh National Single Window project. • Conduct security audits, risk assessments, vulnerability assessments, and penetration testing across applications, APIs, networks, and infrastructure. • Assess security and data protection risks involving sensitive government and trade-related information. • Integrate security and privacy-by-design requirements into applications, APIs, system integrations, and project specifications. • Review authentication, authorization, access control, encryption, and secure data exchange controls. • Manage vulnerability remediation and coordinate corrective actions with development and infrastructure teams. • Implement secure site-to-site IPSec VPN connectivity for integration with government agencies. • Support incident response, infrastructure hardening, security patching, and continuous security improvement. • Collaborate with government stakeholders, developers, vendors, and technical teams on security and compliance requirements. • Prepare security assessment, risk, vulnerability, compliance, and remediation reports.

Cyber Security & Digital Forensic Specialist

Army • Fulltime

Dec 2006 - Dec 2022 • 16 yrs

• Conducted cybersecurity assessments, internal security audits, and security control reviews. • Performed vulnerability assessments, penetration testing, and infrastructure security hardening. • Developed information security policies, procedures, and incident response plans. • Investigated cybersecurity incidents and performed cyber and technical threat analysis. • Conducted security monitoring, log analysis, and incident investigation. • Configured and maintained firewalls, VPN, DLP, and related security technologies. • Performed network, email, endpoint, mobile, memory, and digital forensic investigations. • Prepared cybersecurity incident, forensic investigation, and technical assessment reports.