Rashid Hussain

Governance, Risk Management, and Compliance (2021)
• Closing Compliance Gaps: Addressed identified gaps from compliance assessments and
worked with IT teams to ensure we adhered to cybersecurity standards.
• Cybersecurity Training: Delivered security training to SEWA employees, ensuring that
the entire team was aware of best practices and security protocols.
• IT Compliance Monitoring: Helped set up systems to monitor and report on IT
compliance across SEWA, ensuring alignment with regulatory requirements.
• ISO/IEC 27001 Certification: Played a key role in helping SEWA achieve ISO/IEC 27001
certification, enhancing our overall cybersecurity posture.

IT Infrastructure - IT Security Team (02/2022 - 06/2024)
• Audit & Compliance Support: I worked closely with the GRC team, ensuring compliance
through internal and external audits, addressing findings promptly and effectively.
• Incident Response & Cybercrime Investigations: Managed technical security incidents
and led cybercrime investigations, keeping our systems protected from evolving threats.
• Stakeholder Reporting: Regularly provided security updates to management and
stakeholders, offering clear insights into security challenges and proposed actions.
• Security Projects & Vendor Management: I reviewed and selected IT security solutions,
ensuring vendors delivered on expectations and met our security standards.
• Vulnerability Management: I worked with IT teams to identify and close gaps found in
VAPT reports, ensuring our systems were safe from potential attacks.
• Privileged Access & Network Monitoring: I monitored and maintained privileged access
controls and network performance to ensure the integrity and security of our systems.
• Active Directory Management: Oversaw the creation and management of use

SCADA - OT Security (06/2024 - ongoing)
• IEC 62443 Compliance: I ensure that all substations under my supervision comply with
IEC 62443 standards, creating a more secure OT environment.
• Strengthening System Resilience: I proactively identify system vulnerabilities and lead
efforts to fortify our systems, ensuring stable and secure operations across our network.
• Developing Procedures & Registers: I design and implement procedures, risk registers,
and asset registers for the Engineering section, helping streamline operations and
reduce risks.
• Cybersecurity Solutions: I tailor cybersecurity frameworks that align with SCADAspecific needs, making sure our solutions meet industry best practices and safeguard
critical infrastructure.