Muhammad Hamid A.

Effectual, highly motivated and results oriented Cyber Security Professional having 10 years of extensive technical and leadership experience in designing, implementation and maintenance of Networks and Security Architectures. ● Having profound experience and understanding of different CyberSecurity compliance standards, controls and requirements like ISO27001, PCI DSS, FedRamp, NIST and Cloud Security Alliance. ● Led and Self-driven various networks and security projects for various large and small customers of different verticals including financial institutions, government, enterprises, universities, telecoms among others. ● Profound knowledge and experience of Risk Management, Asset Security, Secure Architecture Design, Business Impact Analysis(BIA),Cost benefit Analysis, Incident response, IAM, SSDLC, BCP/DRP, Cloud Security, OWASP, Configuration & Change management among others.. ● Led team of networks and security professionals for various initiatives taken related to design, implementation, operations and improvement of security posture of organization. ● Took various digital transformation initiatives in networks and security domain to improve the efficiency of resource utilization which resulted in significant business customers and financial gain. ● Provided secure multi-tenant cloud services (XaaS) using various advanced technologies like micro-segmentation, network access control (NAC) and zero-trust architectures. ● Tailored security controls at different levels of networks using DDoS Protections Mechanisms, NGFWs, WAF, Monitoring. ● Secure Migration of workloads and networks from legacy networks to advanced SDN. ● Secure designing of networks in Cloud environments using different tools for IAM, Data Protection (HSM), Logging and monitoring, Incident response. ● Mentoring fresh graduates joining the organization and helping them to grow professionally as well as personal development. ● Directly working with general managers for improvement of business processes which has significantly helped in financial gain and efficient resources utilization. ● Worked with management for preparation of strategic and operational Plans and Budgets for networks and security projects as well as evaluation of different vendors against defined security, technical and quality requirements of organization. SPECIALTIES: ======== Risk Management, Risk assessment, Information Security, Audit, Security Policies, ISO27001, PCI DSS, GRC, Security Assessment, Security Testing, SSDLC, Incident Management, GDPR, OWASP, Cloud Security,ITIL, Project Management.