Engr Yasir Hussain

Meeting with security stakeholders for establishing new product/ application standards, conducting POCs
•Reviewing design & Implementation plan of Cloud Security & Compliance, PRISMA, Cloud Arbor, VPN, Firewalls, IPS, Data networks
•Bi-weekly security reviews with Senior management, CISO
•Engaged for security audits as well as enterprise security compliance for cloud and in-house applications
•Developing information Security Policies & Standards

Managing team across LATAM, NA, EMEA & ASPAC
•Acted as regional lead to work with cross-functional teams for data network & security devices software upgrade
•Software Vulnerability management & remediation on network & security devices inclusive of Cisco ISE, Firewalls, VPN, Routers, Switches, F5
•Meeting with Project managers & senior management to fulfill targets of weekly upgrades
•Multiple Vendor engagement calls to discuss latest vulnerabilities and software/patch to remediate
•Planning of weekly list of devices upgrade based on sensitivity and criticality
•Participating in major and core devices upgrades

• Bi-weekly project progress presentations to senior management for Project status, risks, showstoppers, & issues
• Developing project plans with deliverables & milestones, highlighting risk, timelines & scope
• Managing project teams/resources along with cross-functional department for project deliverable
• Managed day-to-day operational aspects of project resources and scope
• Meeting with executives to provide cyber security roadmap & strategic planning for security technologies
• Meeting budgetary objectives and making adjustments to project constraints based on financial analysis
• Dealing with high end vendors, reviewing proposals, RFP, BOM, HLD, SOW
• Involve as a security expert in development of applications/e-commerce using OWASP to overcome vulnerabilities
• Assigning priorities to project deliverables, outlining project phases, setting deadlines
• Leading meetings as Security Project Manager with business team
• Dealing with Security Projects such as Next Gen. Firewall DMZ, LAN/WAN, SIEM, PAM/IAM, Cloud Security, web application
• Building high level design, implementation plans, build book, policies and procedures manuals
• Managing Security audits as per enterprise security compliance as well as against framework (PCI-DSS, ISO 27001)
• Involve in assessment of security controls, control gap analysis, risk assessment- Archer, vulnerability assessment Nessus
• Managing for new initiatives of Security PoCs, vendor management, RFP, creating security project proposal
• Information Security architecture reviews, taking corrective measures & providing recommendations/best practice on target solutions
• Leading meetings to assist in the technical evaluation & selection of security devices & controls
• Reviewing designs/controls for Firewalls, Proxy, IPS, VPN, IPSec, NAC, SIEM, monitoring systems, Data Network, Jira ticketing
• Working closely with Corporate Security and Operational teams to improve security procedures & standards

Security architecture reviews, taking corrective measures & providing recommendations on target architecture
•Leading meetings as specialist with cross functional IT team, business team & vendors
•Building design, implementation plans, build book, high level design
•Dealing with high end vendors, reviewing proposals, solutions, RFP, BOM, HLD, SOW
•Creating designs in Visio, implementation plans, build book, high level design, technical evaluation report
•Designing & Implementation of Cisco NAC & Firewall FTD FMC (FirePower) / ASA & PaloAlto, VPN, Load balancer, Core Routers, Nexus
•Deployment of front-end & back-end DMZ on Cisco & Palo Alto with Firewall Rules & Policies
•Dealing with cross-functional department for security deliverables
•Vendor management for solution delivery
•Creating migration plan techniques for major networks & applications
•Involve in major network & security implementations
•Performed gap analysis and recommending solutions
•Leaded Vulnerability assessment using Nessus and PT for network
•Making sure security controls are placed adequately in IT & business process
•Network & cyber Security architecture reviews and taking initiatives for design corrections
•Engaged for PCI-DSS & enterprise security compliance
•Creating migration plan, configurations & test plans techniques /documents for networks & applications
•Interface into Business units to bring business context to Cyber threat and trends
•Bi-weekly project progress presentations to management for Project status, risks, showstoppers, & issues

• Performed Security/IT audits (PCI-DSS, ISO 27001, NIST, HIPAA), gap analysis, GRC cycle, risk assessment
• Delivered Security design reviews, security solutions, IT audits, proposal, project plans, conducting client interviews, scope definition, solution research & recommendations
• Security Architecture Assessments & business impact assessments
• Acted as Project Manager for various projects, created deliverables/milestones based on project phases/resources
• Bi-weekly project progress presentations to senior management for Project status, risks, showstoppers, & issues
• Business development, technical feasibility analysis, SOW, BOM, project plans, response to RFPs
• Created Project Plans for Security Architecture domains
• Experience in customer/client management/vendor management with strong interpersonal skills

• Project Manager for Mega Smart City worth $75M (Delivered with collaboration of Cisco Systems/ Orange)
• Drafting business need in RFP for Security services of mega city
• Developed & managed project budget, project plans, timelines & scope
• Hold project kick-offs and project review session; managed project resources, developing, motivating, coaching and advising
• Managed project constraints, deliverables, milestones, cumulative & project health reports
• Weekly Project Progress Deliverables Presentation to C-Level, VP, Directors
• Project Manager Governance Risk Compliance for Information Security Audits ( PCI-DSS, ISO 27001, HIPAA )
• Created and executed project plans and budgets
• Manage day-to-day operational aspects of project resources and scope
• Establishing Alliances with Vendors for B2B
• Reconciliation OPEX and CAPEX budget of department
• IT Service Management i.e. Incident, Problem, Release, Change, Emergency, Knowledge, Outages
• Helping to define and implement IT policies, procedures and best governance practices ITIL
• Assessed internal control procedures specific to business

FVC is a UK based solution provider for Data Center Network and Security "Information Security Consultant/ Team Lead"
•Project Manager for e-Govt Data Center hosting projects ( IAAS )
•Managed Pre-Sales activities of Security (RFP, Designs, Presentations)
•Security Design Reviews & Assessment/Penetration Testing for mainly Telecom & Financial Sectors
•Implementation of PCI-DSS & ISO 27001 Controls for financial & government sectors
•Implemented Proof of concept for Security Devices inclusive of BYOD, NAC, Firewalls, IPS in client Data Center

HSBC Group, one of the largest Banking & Financial Services Organisations in the world "Sr. Cyber Security Specialist" Project Department:
•Project Management, Budgeting, Handling & Planning of Security related Projects
•Bi-Weekly reporting to CTO, CISO & Director for Projects status, risk & issues
•Re-Designed Data Centre & DR in 3-tier Security Architecture
•Developed information Security Policies & Procedures
•Vendor management for Services Delivery including diferent vendors such as Cisco, Microsoft, HP
•Performing PCI-DSS & ISO 27001 gap analysis, presenting reports on audit examinations, conclusions and recommendations
•Delivered presentations to business, senior management & C-level executives selecting the appropriate approach
•Conducting technical configuration and architecture assessments for security solutions
•Penetration Testing/Network & Security Auditing/ Policy Maker
•Responsible for ensuring all newly deployed Branches are under Regulatory Compliance
•Actively Participated in Risk Assessment for newly launched services
•Review the drill result and prepare the BCP summary for the stakeholders and management