Shahidul Islam

Cyber Security GRC Consultant

PwC • Full time

Jan 2022 - Present • 4 yrs 4 mos

Proficiency in the following frameworks: NIST, ISO 27001, ISO 20000, SWIFT CSP, ANSI/TIA-942, ITIL v4, Essential Cyber Security Controls (ECC – 1: 2018), SAMA CSF, ITGC Initiate, develop, and maintain information security policies and procedures and ensure that the security strategies are being followed, so as to meet the organizational security goals and standards Perform IT system security assessments following regulation requirement, define, promote and manage IT information security program, make sure IT governance, audit, and compliance requirements are met Evaluate, identify, and recommend the IT Security Solution that will best fit the need of the organization Monitor the security controls for security breaches and investigate violations Create and manage information security and risk management awareness training programs for all employees, contractors, and approved system users Responsible for IT security audit and IT security training