Sadaqat Ali

vCISO

Freelancing Career • Full-time

Jan 2023 - Present • 3 yrs 5 mos

* Develop and maintain the organization's information security strategy and roadmap. * Establish, review, and update information security policies, standards, and procedures. * Identify, assess, and manage information security risks. * Maintain and monitor the information security risk register. * Advise management on cybersecurity risks, threats, and mitigation strategies. * Ensure compliance with applicable regulatory, contractual, and industry requirements. * Support and oversee implementation and maintenance of the Information Security Management System (ISMS). * Lead and support ISO 27001, SOC 2, and other compliance initiatives. * Conduct security reviews of systems, applications, cloud environments, and business processes. * Provide security guidance for new projects, technologies, and third-party services. * Oversee vulnerability management and remediation activities. * Monitor the effectiveness of security controls and recommend improvements. * Support incident response planning, investigations, and post-incident reviews. * Coordinate security awareness and training programs. * Assess and manage third-party and supplier security risks. * Support business continuity and disaster recovery planning and testing. * Define and monitor information security metrics, KPIs, and reporting. * Prepare and present security reports to senior management and stakeholders. * Coordinate internal and external security audits and assessments. * Promote a culture of information security throughout the organization. * Stay informed of emerging cyber threats, vulnerabilities, and regulatory changes. * Recommend security investments and strategic improvements to enhance the organization's security posture.