Muhammad Sajid Khan
Information Security/ GRC Expert
1 recommendation
Salary / Daily rate
1 person recommend
Islamabad, Islamabad Capital Territory, Pakistan
Freelance, open to permanent contract
Can come onsite
Skills
Languages
About me
Intro
Senior cybersecurity professional with 14+ years of experience leading governance, risk, and compliance (GRC) programs for government, finance, and R&D sectors. Adept at implementing ISO 27001, NIST CSF, PCI DSS, IEC 62443, NIS2, and DORA frameworks, reducing risks by up to 80% through innovative tools and training. Worked on AI governance, AI risk assessment and treatment in critical infrastructure sector.
Work experience
Independent Freelancer
Independent FreelancerFreelance
Apr 2016 - Present
10 years 7 months
Remote
— Core Cybersecurity & Compliance Skills IT Security Policies & Procedures Ground Segment & Space System Security Cybersecurity Risk Management Compliance Management (ISO 27001, NIS2, DORA, PCI DSS) Third Party Risk Management (TPRM) Internal & External Audits Vulnerability & Threat Mitigation Strategies Security Controls Implementation Security Architecture & Secure System Design NIST Cybersecurity Framework (CSF & RMF) Data Protection & Privacy (GDPR-aligned) Security Gap Analysis & Audit Management Secure Technical Requirements Definition Request for Proposal (RFP) – Security Inputs & Evaluation Business Continuity & Incident Response Planning IT Security Assessments & Governance Compliance Readiness for Financial and Critical Infrastructure SOC, SIEM, and Security Operations Oversight — Leadership & Project Experience Cybersecurity Program Management Team Leadership & Cross-Functional Collaboration Policy & Control Development Executive-Level Reporting & Risk Dashboards Security Awareness & Training Programs Stakeholder Communication (Internal/External) Agile & Waterfall Project Delivery in Regulated Environments — Tools, Frameworks & Industry Standards ISO/IEC 27001:2022, ISO 22301 NIS2 Directive Implementation DORA Regulation Auditing & Preparation CIS Controls PCI DSS 4.0 Compliance Cyber Risk Quantification ITIL & COBIT Principles Microsoft 365 Security (incl. Defender, Azure AD) Risk Registers, Control Matrices, and GRC Platforms — Soft Skills & Strengths Strategic Problem Solving Attention to Detail in Security Audits Strong Written & Verbal English Communication Proactive Leadership in High-Stakes Environments Analytical Thinking for Complex Security Scenarios Adaptability Across Industries (Finance, Space, IT)
Space/ Critical Infrastructure Sector
Dec 2014 - Present
11 years 11 months
Islamabad, Islamabad Capital Territory, Pakistan
Manager Information Security/ GRC
Apr 2020 - Present
6 years 7 months
Islamabad, Islamabad Capital Territory, Pakistan
Skills: Ground Segment Security · Leadership · Data Privacy · Technical Requirements · ISO/IEC 27001:2022 . ISO 22301 . NIS2 Directive Implementation . Regulation Auditing & Preparation . CIS Controls . Cyber Risk Quantification . IT Security Policies & Procedures · Auditing · Mitigation Strategies · Security System Design · Internal Audits · Request for Proposal (RFP) · Team Leadership · Compliance Management · Risk Management · System Architecture · Audit Management · English · Problem Solving · NIST · IT Project & Program Management · IT Security Operations · Third Party Risk Management (TPRM) · Attention to Detail · IT Security Assessments
Assistant Manager (Information Security)
Dec 2014 - May 2020
5 years 6 months
Islamabad · On-site
Skills: Ground Segment Security · Data Privacy · Technical Requirements · IT Security Policies & Procedures · Auditing · Mitigation Strategies · Internal Audits · Request for Proposal (RFP) · Team Leadership · Compliance Management · Risk Management · System Architecture · Audit Management · English · Problem Solving · NIST · IT Project & Program Management · Cyber-security · Third Party Risk Management (TPRM) · Attention to Detail · IT Security Assessments
IT Security Officer
The First MicroFinanceBank Ltd,
Aug 2012 - Dec 2014
2 years 5 months
Head Office, Islamabad
Skills: Data Privacy · Auditing · General Data Protection Regulation (GDPR) · Mitigation Strategies · Internal Audits · Compliance Management · Risk Management · Audit Management · English · NIST · IT Project & Program Management · Third Party Risk Management (TPRM) · PCI DSS
Information Security Engineer
DeltaSoft, Inc.
Aug 2011 - Jul 2012
1 year
Rawalpindi, Pakistan
Skills: Mitigation Strategies · Internal Audits · Compliance Management · Risk Management · English · NIST · Third Party Risk Management (TPRM)
Education
National University of Sciences and Technology (NUST)
Master's Degree, Information Security/ Cybersecurity
2010 - 2013
3 years 4 months
Licenses & certifications
Project Management Professional (PMP)
Issued: Mar 2022
Certified Information Systems Security Professional (CISSP)
Issued: Jul 2017
ISO/IEC 27001 Lead Auditor
Issued: May 2016
CHFI (Computer Hacking Forensic Investigator)
Issued: Jul 2014
Certified Ethical Hacker (C|EH)
Issued: Apr 2014