Hazar M

Information Security & GRC Consultant

Self-Employed / Freelancer

Dec 2023 - Present • 2 yrs 10 mos

Providing end-to-end Governance, Risk, and Compliance (GRC) advisory services for SaaS startups, fintechs, and SMEs preparing for ISO/IEC 27001:2022 and SOC 2 Type I/II audits. Key Responsibilities & Deliverables: • Performed comprehensive Gap Assessments against ISO 27001 Annex A controls and SOC 2 Trust Services Criteria. • Authored audit-ready ISMS policy packages (Access Control, Incident Response, Cryptography, Business Continuity, Vendor Risk Management). • Built quantitative and qualitative Risk Registers with actionable risk remediation roadmaps. • Supported technical teams in evidence collection and third-party vendor security evaluations.

Cybersecurity Researcher

VulnHero

Dec 2022 - Dec 2023 • 1 yr

Conducted technical vulnerability assessments and security research across web applications, APIs, and network perimeters. Key Responsibilities: • Identified security vulnerabilities and mapped findings to CVSS risk levels and business impact. • Produced detailed technical assessment reports with pragmatic remediation recommendations. • Collaborated with engineering teams to validate fixes and enhance secure system posture.