Taimur Tufail

• Reporting directly to Chief Technology Officer (CTO). • Define security strategy, OKRs and risk-based roadmap, align stakeholders to measurable outcomes. • Lead a combined security and operations team, hire, mentor and drive agile delivery. • Build ISO 27001 ISMS from scratch with governance and audit readiness (0 major non-conformities) while also supporting Cyber Essentials Plus, coordinate GDPR and CCPA. • Led security integration for the Linnworks acquisition of SkuVault, testing systems during consolidation and aligning controls and standards. • Manage third-party risk, vendor reviews and questionnaires, use AI for drafting and evidence mapping with human validation (10 to 1 days). • Secure cloud across AWS and Azure subscriptions, improve IAM, segmentation, hardening and posture management. • Implement identity and endpoint controls (Entra ID, MFA, SSO, RBAC, PAM, EDR, MDM, access reviews) to enforce least privilege. • Build end-to-end vulnerability management across infra and code, embed SAST, DAST, SCA, SBOM and scanning into CI/CD. • Operate SIEM-style detection with EFK, develop investigation workflows, tune IDS and config-change alerting, enable threat hunting. • Lead incident response lifecycle, maintain playbooks, run tabletop exercises and execute post-incident reviews. • Govern joiner, mover, leaver processes plus hardware provisioning, patching cadence and software licensing controls.

• Designing and managing cloud (Amazon AWS) to the latest security standards. • Scanning for vulnerabilities in code and infrastructure. • Perform analysis of log files (EFK stack) from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs and intrusion detection system (IDS) logs) to identify possible threats to network security. • Setting up alerts for intrusion detection system & configuration changes. • Developing behavioral pattern recognition for security issues. • Conducting employee security awareness campaigns. • Maintaining incident response plan, to include determining scope, urgency and potential impact; identifying the specific vulnerability and making recommendations that enable fast remediation. • Working on getting security compliance certifications (Cyber Essentials Plus (UK) and ISO27001). • Working with GDPR and CCPA. • Managing accesses in the company. • Establishing and implementing security policies, procedures, standards and guidelines.

• Solving customer’s technical issues with the Linnworks software on chats, phones and Freshdesk tickets system. • Working with SQL databases • Working with Linnworks API and integration of various E-commerce channels including Amazon, eBay, Tesco, Magento websites.

Managing ESN.ee website and emails Solving problems of different IT managers for each section Meeting with International ESN sections and implementing their techniques and tools

Managing social media and websites Creating new event, content and graphic designing Being tutor of new international students and help them in settling down here