Mukarram Ali
Senior IT Risk Specialist @Munich Re
Signup · Get unlimited contacts
WORK HISTORY
Senior IT Risk Specialist @Munich Re
CA
Significant achievements: Served as IT Product Manager for enterprise-wide automated penetration testing implementation across global endpoints. Managed complete product lifecycle, including requirements gathering, vendor evaluation of 5+ solutions, conducted comprehensive PoCs with custom test scenarios, selected optimal product based on technical and business requirements, and led deployment across hybrid cloud/on-premises infrastructure supporting five global regions. Established product compliance framework aligned with ISO 27001 and PCI-DSS requirements, managing all infrastructure components (cloud/on-prem), defining product roadmap, and providing audit support during annual assessments, achieving 40% reduction in vulnerability detection time and enhancing CMMI maturity level.Core Responsibilities:• IT Product Management: Manage automated penetration testing platform as IT Product Manager, overseeing complete product lifecycle, all cloud and on-premises infrastructure components, defining product roadmap and enhancements, coordinating with cross-functional teams, ensuring SLA compliance, and managing annual audit requirements for compliance frameworks (ISO 27001, PCI-DSS, SOC 2)• Conduct advanced penetration testing across web applications, APIs, cloud infrastructure (Azure/AWS), internal networks, and thick-client applications using Burp Suite Pro, Metasploit, Cobalt Strike, and BloodHound• Design and execute Red Team engagements simulating APT scenarios, leveraging MITRE ATT & CK framework for realistic attack emulation and security control validation• Manage relationships with external penetration testing vendors globally, defining scope, coordinating activities, and validating deliverables against security standards• Conduct third-party vendor security assessments, evaluate SOC 2 Type II reports, and deliver risk-based recommendations with remediation roadmaps to senior management and audit committees.
EDUCATION
Preston University
Bachelor's degree, Information Technology
SKILLS
ABOUT MUKARRAM ALI
OSCP | CRTO | CEH | CISM | CISA | AAISM | Azure Administrator | VCP-DCVSenior cybersecurity professional with 14+ years of experience across insurance, banking, and healthcare. I specialize in penetration testing, enterprise vulnerability management, and cloud security (Azure/AWS), with extensive experience in compliance- and audit-driven environments. At Munich RE, I serve as a lead tester and IT Product Manager for an automated penetration testing platform that supports endpoints globally across hybrid cloud and on-prem infrastructure. I have experience operating in highly regulated environments across the US, EMEA, and Asia-Pacific regions, working with cross-cultural teams where risk ownership, audit defensibility, and regulatory alignment are critical to business operations. I am also familiar with NCA Essential Cybersecurity Controls (ECC-2:2024) and SAMA Cyber Security Framework (CSF) principles.I also serve as IT Product Manager for an automated penetration testing platform supporting endpoints globally, owning vendor evaluations, proof-of-concept efforts, and enterprise rollout across hybrid cloud and on-prem infrastructure. My role combines deep hands-on offensive security expertise with senior responsibility for risk governance, audit defensibility, compliance alignment, and executive decision support across regulated environments in the US, EMEA, and Asia-Pacific.Earlier in my career, I worked in large, compliance-driven enterprise environments, including CIBC and the Ontario Medical Association, building a strong foundation in SIEM operations, endpoint security, incident response, and infrastructure security. This enables me to translate technical findings into audit-ready evidence, risk-based remediation, and clear guidance for senior stakeholders, audit teams, and regulators.I focus on proactive security, identifying vulnerabilities before adversaries do, while building sustainable programs that balance technical rigor, regulatory compliance, and business enablement.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.