Information Security Specialist
SOFTOO
مجموع سنوات الخبرة :4 years, 8 أشهر
• Led the successful implementation of ISO 27001 & ISO 27701 ISMS & PIMS frameworks ensuring data confidentiality, integrity, and availability for both client and company information
• Assisted in supporting global cybersecurity risk management, data privacy, GDPR compliance, and regulatory functions.
• Conducted internal audits, risk assessments, and vulnerability identification this proactive approach helps in identifying and mitigating risks effectively, reducing the likelihood of security incidents or data breaches.
• Delivered security awareness training to employees fostering a culture of security consciousness across the organization
• Considering the company's size of 200 to 300 employees, my role significantly influences the organization's adherence to standards and regulations, ensuring a secure and compliant operational environment.
• Developed and implemented preventative measures against incidents, data loss and other risks
• Assessed company security risks and developed actionable solutions to be presented to management for improvement in accordance with state-of-the-art practices.
• Advised senior management (CEO, CCO, CTO, and COO) and departments on viable options for the internal security posture of the organization.
• Advised on the setup of servers, networking equipment, and other essential IT systems to support business operations securely and efficiently.
• Developed an asset management strategy to effectively track and manage all IT assets within the organization, including hardware, software, and digital assets.
• Deployment of Bitdefender endpoint security to protect endpoints (computers, laptops, servers) from malware, ransomware, and other cyber threats.
• Implementation of MAC filtering on UniFi network equipment to enhance network security by controlling access based on device MAC addresses.
• Deployment and configuration of JumpCloud, a cloud-based directory service, for centralized user and device management.
• Collaborated on constructing and implementing audit programs and practices to ensure organizational compliance with industry and regulatory standards such as ISO 27001/2, SOC2 Type 2, SOX audits, and client audits
• Worked closely with internal business units, HR, admin and other relevant departments to perform internal audits
• Conducted internal audits and assessments according to business requirements, ensuring thorough evaluation and compliance with organizational standards and objectives
• Analyzed information and identify potential risks and should have problem-solving skills to be able to determine how to reduce those risks
• Performed audit/assessment & communicate identified non-conformities to appropriate parties to ensure a clear understanding of the non-conformities as well as potential remediation
• Developed and implemented preventative measures against incidents, data loss and other risks
• Assessed company security risks and developed actionable solutions to be presented to management
• Represented Ericsson, addressing local issues and contributing to global IT and customer projects.
• Provided end-user support, on general software issues, installation of applications and operating system
• Assisted in installation, operation, maintenance of the local IT environment
• Managed stock and IT asset inventory for the local site, maintaining accurate records and ensuring efficient resource allocation.
• Managed IT services active directory server, wifi, isp, network devices configuring tools and local application support
• Supported external visitors, ericsson and non-ericsson, within ericsson premises in basic IT services
• Considering the company's size of 400 employees, my support plays a crucial role in maintaining a stable IT infrastructure
• Utilized the OTRS ticketing system to efficiently manage and resolve end-user queries and issues for 300 employees across Islamabad, Lahore, Karachi, and Dubai offices, both onsite and remotely.
• Performed troubleshooting on LAN, Wi-Fi, VoIP, Email, ERP, Microsoft dynamics AX, Symantec endpoint protection, and Huawei telepresence systems to ensure seamless service delivery.
• Managed layer 2 technologies including VLANs, tagged/untagged traffic, and STP
• Configured juniper firewall SSG5 & SSG140 for internet firewall and security policies.
• Configured and manage ruckus zone director and ruckus wireless access points.
• Performed network troubleshooting for Wi-Fi/LAN, monitor data-center environments, and configured foundry/smc switches, including port configuration for VoIP and end-users.
• Conducted root cause analysis and prepare reports for information security incidents, for internal & external audit compliance with ISO 27001 & ISO 9001.
• Monitored COMSATS internet services nodes, including routers, switches, and base stations, utilizing MRTG and NAGIOS
• Designed and installed local area networks and wide area networks for new projects
• Installed new internet connections for clients and configured wireless equipment from UBNT (Nano-Beam, Power Beam, Rocket Configuration), link sys (Cisco), TP-LINK, and D-Ruckus
• Provided technical support to customers, addressing internet-related issues and assisting with hosting, domain and email clients Apps remotely and on call
• Implemented port forwarding for remote access and monitoring, conducted wireless surveys before installing new wireless internet connections
• Installed new hardware, including servers, printers, and computer workstations
• Conducted day-to-day administration and monitoring of network usage, troubleshooting network faults, and managing dns, dhcp, and vlan
• Maintained COMSATS internal network and addressed various issues with daily documentation.
• Managed live broadcasts in the master control room (MCR), ensuring smooth transmission.
• Resolved network issues, maintaining uninterrupted operations.
• Led network management and development, ensuring reliable telecommunications.
• Installed, configured, and repaired hardware and software for better performance.
• Demonstrated proficiency in graphic design and video editing, contributing to client interactions, promoting dramas, and producing daily commercial announcements to engage audiences effectively
Computer systems networking and telecommunications