Mahmud Hasan

About Mahmud Hasan

As the CEO and founder of ARFAHH LLC, I lead a passionate team of technology experts…

Experience

1. Information Security Governance and Risk Analyst

   Star Info Tech Llc

   Nov 2024 — Present · Buckeye, AZ, US

   Implement the organization\'s cybersecurity governance framework to ensure confidentiality, integrity, and availability of critical systems.• Monitor and assess security risks, including potential threats and vulnerabilities to client systems, providing detailed analysis and reporting.• Conduct cyber risk assessments using data from internal and external sources and apply the intelligence gathered to improve the security posture.• Ensure that security assessments, testing, and evaluations are completed, documented, and meet regulatory and compliance standards.• Offer guidance on securing information systems and support vulnerability assessments and compliance audits.• Work with teams to integrate security governance throughout the lifecycle of systems, ensuring risk management principles are applied.• Utilize security tools and devices commonly used in enterprise environments, including SIEM solutions such as Elastic Security or ArcSight, to support governance and compliance efforts.• Create and maintain incident reports, compliance dashboards, and metrics to support governance efforts.• Use ticketing systems to track and manage security incidents, risks, and governance tasks.• Demonstrate experience with Microsoft and Linux operating systems, focusing on compliance and secure configurations.• Review and assess indexed data to ensure it complies with industry best practices and governance standards.• Support the development of policies and strategies to manage cybersecurity risks across the organization.