
Firudin Davudzada
CISO | CISSP | CCISO | Certified Lead Implementer | Governance, Risk & Compliance Strategist | Cybersecurity Executive | Expert in Offensive Security & Cloud Security | Expert at AKTA
3 recommendations
Salary / Daily rate
3 people recommend
Baku, Azerbaijan
Freelance, open to permanent contract
Skills
Languages
About me
Intro
As a global information security leader with extensive experience across the USA, EU, Asia, and the Middle East, I specialize in developing and executing security strategies that empower organizations to thrive in today’s complex digital landscape. My expertise spans ISO 27001, GRC, cloud security, offensive security, and advanced technologies, ensuring operational resilience and competitive advantage. Certified as a Lead Auditor and Implementer, I align regulatory frameworks with business goals, delivering solutions that secure critical assets, streamline operations, and mitigate future threats. Core Expertise Governance, Risk, and Compliance: Mastery of ISO 27001, GDPR, PCI DSS, NIST, and CIS Controls Cloud Security: Securing multi-cloud architectures (AWS, Azure, Google Cloud) with Kubernetes/container security Offensive Security: Certified Ethical Hacker with expertise in vulnerability assessments and penetration testing DevSecOps: Integrating security into CI/CD pipelines using Jenkins, GitHub Actions, Terraform, and Ansible Incident Response: Mitigating risks and ensuring business continuity with CrowdStrike, SentinelOne, and Carbon Black SIEM and SOAR Integration: Implementing Splunk, QRadar, Elastic SIEM, and Cortex XSOAR for threat detection and automation Secure SDLC: Embedding security in development lifecycles using OWASP ZAP, ArcherySec, and SAST/DAST tools Zero Trust Architectures: Deploying secure remote monitoring solutions using Cisco Meraki Digital Forensics: Utilizing Binalyze AIR, EnCase, and FTK for incident investigation Global Achievements Led ISO 27001 certification and CIS Controls implementation for multinational corporations Directed cloud security transformation projects to protect critical assets while optimizing costs Built SOC solutions integrating advanced SIEM, SOAR, and XDR tools Automated DevSecOps pipelines, reducing vulnerabilities by 40% Adopted Zero Trust Architecture to elevate security posture Technical Skills Security Tools: Metasploit, Nessus, Burp Suite, Qualys, OpenVAS Cloud & DevSecOps: Kubernetes, Docker, Jenkins, Terraform, AWS, Azure Sentinel Frameworks: MITRE ATT&CK, OWASP, Agile, CIS Controls Vision I am passionate about enabling organizations to innovate securely while mitigating risks in an interconnected world. By combining strategic foresight, technical expertise, and adaptability, I deliver security solutions that protect and propel business growth. Let’s connect to discuss how I can help your organization achieve global security excellence.
Work experience
Information Security Manager
Bamboo Card
Aug 2025 - Present
1 year 3 months
Expert
Azərbaycan Kibertəhlükəsizlik Təşkilatları Assosiasiyası (AKTA)
Feb 2025 - Present
1 year 9 months
Group Chief Information Security Officer (CISO)
Datricon Technologies
Aug 2024 - Aug 2025
1 year 1 month
• Developing and executing the enterprise-wide cybersecurity strategy aligned with business objectives, covering both cloud-native and on-premise infrastructures; • Establishing governance, managing cyber risk, and ensuring compliance with frameworks such as ISO 27001, NIS2, GDPR, and CIS Controls (IG1–IG3); • Designing the security architecture and building the company’s Security Operations Center (SOC), including the integration of SIEM, SOAR, EDR/XDR, and PAM technologies; • Managing cybersecurity budgets, optimizing resource allocation for maximum operational and strategic impact; • Collaborating with executive leadership, partners, and regulators to strengthen trust, ensure business continuity, and support the company’s global growth. Key contributions include creating the company’s cybersecurity blueprint from scratch, aligning it with international best practices, and enabling Datricon’s readiness for global partnerships through robust security frameworks.
SecQ.IO
Apr 2023 - Aug 2024
1 year 5 months
California, MD, USA
Information Security Manager
Dec 2023 - Aug 2024
9 months
California, MD, USA
- Lead the development and implementation of security policies and procedures. - Manage a team of security professionals focused on maintaining and enhancing security infrastructure. - Oversee and ensure compliance with FedRAMP, CIS, ISO27001 standards and other regulatory requirements. - Collaborate cross-functionally with departments to mitigate risks and address security concerns. - Lead incident response efforts, managing security breaches and ensuring timely resolution. - Drive continuous improvement of cybersecurity measures across the organization.
Senior Information Security Engineer
Apr 2023 - Dec 2023
9 months
California, MD, USA
- Designed, implemented, and maintained security systems to protect company data and assets. - Led projects related to cloud security, network defense, and incident response. - Contributed to achieving and maintaining FedRAMP compliance. - Conducted rigorous security testing and continuous monitoring to improve the organization's security posture. - Collaborated with cross-functional teams to identify and mitigate security risks. - Developed and implemented tools and strategies to enhance overall security and incident response efficiency.
YollaPay
Dec 2020 - Jan 2024
3 years 2 months
Information Security Manager
Sep 2021 - Jan 2024
2 years 5 months
* Working knowledge in security framework models such as ISO 27001 and NIST. * Ability to analyze network, event, and security logs and SIEM alert logs. * Perform penetration tests on network devices, operating systems, and applications. * Establish improvements for existing security services, including hardware, software, and policies. * Configuring rules and maintaining Palo Alto Firewalls & Analysis of firewall logs. * Develop and implement information security policies, procedures and standards to ensure the confidentiality, integrity and availability of YollaPay's systems and data * Manage and oversee security programs including vulnerability management, incident response, risk management, and compliance * Collaborate with cross-functional teams to ensure that security is integrated into the development process * Conduct risk assessments and implement controls to mitigate identified risks * Develop and implement security awareness and training programs for employees * Lead and coordinate the response to security incidents and coordinate with external parties as necessary Perform security testing and assessments of company systems and applications to identify vulnerabilities and ensure compliance with industry standards and regulations
Information Security Engineer
Dec 2020 - Oct 2021
11 months
*Pentesting software systems, network and data centers *Search for vulnerabilities and risks in hardware and software. * Establish improvements for existing security services, including hardware, software, and policies. * Configuring rules and maintaining Palo Alto Firewalls & Analysis of firewall logs. *Debugging and investigating web application. *Lead strategic planning efforts for the IT discipline, ensuring that IT programs and initiatives align to company-wide business objectives and strategies *Providing technical leadership at the enterprise level and serve an integral role in operations and business development. *Leading your team in identifying, comparing, selecting, and implementing technology solutions and partnerships to meet current and future needs *Making technology-related recommendations supported by data for policy adoption that includes analysis of current regulatory actions, technological innovations, and fiduciary considerations. *Software systems design - Deep understanding of interconnected systems and the cost, performance, and strategic implications of making particular architecture choices
Product Information Security Analyst
Omilia - Conversational Intelligence
Feb 2022 - Jan 2023
1 year
*Dealing with implementing security in every phase of SDLC and participating in security audits and security risk assessments. *Edit process documentation (for internal use as well as publication) for comprehensive risk analysis and information security service offerings *Validating the false positives and reporting the issue *Review technical standards and procedures and makes recommendations for improvement in alignment with policy and best security practices
Information Security Engineer
Mico World Limited Co.
Aug 2016 - Mar 2020
3 years 8 months
*Managing security access *Handling security assessments via vulnerability testing and risk assessment report *Conducting both internal & external security inspections *Examining security violations to recognize the source of the cause *Continuously renewing the company's incident response and emergency recovery methods *Testing the security of third-party companies and co-operating with them to meet security specifications
Education
National Technical University "Kharkiv Polytechnic Institute"
Bachelor of Science - BS, Computer Science
Trine University
Master of Science - MS, in Information Studies
Licenses & certifications
Certified Information Systems Security Professional (CISSP)
Issued: Jan 2026
Certified Chief Information Security Officer (CCISO)
Issued: Jan 2026