Faria Shahjahan Anika

WORK HISTORY

EDUCATION

ABOUT FARIA SHAHJAHAN ANIKA

I am a GRC-focused Information Security professional currently pursuing a Master’s in Information System Security Management at Concordia University of Edmonton, Canada. I bring extensive hands-on experience from KPMG Bangladesh (Rahman Rahman Huq) where I worked across multiple industries delivering Governance, Risk, and Compliance (GRC) and IT Advisory engagements.My core expertise lies in information security governance, where I have developed and reviewed security policies, procedures, and guidelines aligned with ISO/IEC 27001. I have actively identified gaps between existing organizational controls and applicable laws, regulatory requirements, and industry standards, and provided practical, risk-based recommendations to strengthen compliance and security posture.With a strong foundation in Information Systems Audit and Technology Risk, I have worked on areas including risk assessments, control design and effectiveness testing, regulatory alignment, and compliance readiness. My academic background in Information and Communication Engineering, combined with my professional consulting experience, enables me to translate technical risks into governance and business-focused solutions.I am particularly interested in GRC, information security compliance, regulatory risk, and cybersecurity governance, and I am passionate about helping organizations build secure, compliant, and resilient information systems in an evolving regulatory and threat landscape. Core Focus Areas:• Governance, Risk & Compliance (GRC)• ISO/IEC 27001 (Policy, Procedures & Gap Analysis)• Regulatory & Legal Compliance• Information Security Governance• IT Risk Assessment & Controls• IT Advisory & IS Audit