Wais A

Senior Information Security Consultant @Independent Consultant

Toronto, ON, CA

4 years |~10 client engagements | Public & Private SectorImpact Summary:Supported 10+ enterprise engagements, including SOC 2, ITGC, and PCI DSS audits, 200+ third-party vendor assessments,150+ project security assessments, and hundreds of systems and cloud workloads across regulated environments.Key Responsibilities & Expertise:• Led AI Governance initiatives, including risk assessments, policy development, and responsible-AI control frameworks• Designed and reviewed security architecture for cloud, hybrid, and on-prem environments• Delivered cloud security assessments and control alignment across Azure, Microsoft 365, and GCP• Conducted IT security audits, control testing, and audit-readiness activities (SOC 2, ISO-aligned, PCI DSS)• Performed project, operational, and enterprise security risk assessments• Executed third-party security risk assessments, vendor due diligence, and ongoing risk tracking• Led vulnerability management programs, including risk-based prioritization, remediation tracking, and executive reporting• Developed data analytics and visualization (Power BI dashboards, KPIs, KRIs) to support security governance and decision-making• Led SOC 2 Type I & Type II audit readiness, evidence coordination, and gap remediation• Led PCI DSS v4.0 audit and readiness engagements, including scope definition, gap assessments, and remediation roadmaps

American University of Afghanistan (AUAF)

Bachelor of Science (BSc), Computer Science & IT

Rochester Institute of Technology

Master of Business Administration (MBA), Management Information Systems, General

Portland State University

Intensive English Language Program, English Language and Literature, General