Muhammad Ibrahim Aziz

Cyber Security Analyst @Al Nafi Cloud

Markham, ON, CA

Define the Group IT security policy in line with ISO 27001, 27017, and 27018 standards and supervise its implementation; define the IT security Group policies and guidelines, standardize the IT security processes, and harmonize related tools across the Group; lead and monitor the IT security activitiesManage IT risks through their detection, identification, monitoring, evaluation, and mitigationApply cybersecurity risk management principles to conduct a quantified assessment of first-line business applications, IT systems, and processes according to established ISO 27001 ISMS requirementsReview results to identify potential outlier data inputs, identify potential cyber threats, analyze the risks, and recommend controls based on the analysis resultsAnalyze existing cybersecurity mitigation strategies/controls and assess their effectivenessWriting detailed reports containing findings, observations, and recommendationsRisk Analysis experience in line with ISO 27005 standardA robust understanding of IT and Information Security risk mitigation control processes such as vulnerability and threat management, patch management, penetration testing / red-teaming Good knowledge and understanding of common cybersecurity technology tools such as firewalls, IDPS, Network access control, DDOS Mitigation, Anti-Malware, Anti-Virus, EncryptionAbility to develop and evaluate technology policies, technical engineering standards, and operational proceduresHands-on experience on Kali Linux, Parrot OS, and Nafi Linux to perform Vulnerability AssessmentsExperience in performing Vulnerability Assessments using tools like Nmap with Nmap Scripting Engine (NSE), Burpsuite, Recon-ng, ZAPPerform authenticated and unauthenticated scanning using Burpsuite, Nessus and various tools.Detecting and evading firewalls using NmapKnowledge and understanding of OWASP Top 10 2021Knowledge of Firewalls, SIEM, VPNs, and SSL/TLS