Umer T.

✅ ISO 27001 | SOC 2 | SAMA CSF | GDPR | PDPL | NIST — Compliance That Actually Gets You Certified ✅ In 10+ years helping banks, fintechs, telecoms, and healthcare firms across the GCC, Singapore, and beyond — I've seen most compliance projects fail for the same reason: poor preparation, generic policies, and consultants who don't understand the auditor's perspective. I'm both a practitioner and a certified auditor. That means I know exactly what auditors look for — and I build your compliance program to pass, not just to document. 🔹 What I Can Do For You: ✔ ISO 27001 / 27017 / 27018 / 27701 & SOC 2 — End-to-end implementation: gap analysis, risk assessments, policy development, internal audits, and external audit support through to certification. ✔ GRC Frameworks — NIST 800-53, CIS Controls, HIPAA, PCI DSS, SAMA CSF, NCA ECC, NCA DCC, BCM, PDPL, GDPR, DPTM. I translate complex frameworks into practical, actionable roadmaps. ✔ Risk Management & Security Audits — IT risk assessments, third-party vendor risk, gap analyses, and compliance audits with findings your team can act on. ✔ Virtual CISO (vCISO) — Fractional CISO support for startups and SMEs that need strategic cybersecurity leadership without a full-time hire. ✔ GRC Tooling — Hands-on experience with Lockpath, AuditBoard, OneTrust, and ServiceNow GRC to automate and scale your compliance program. 🔹 Credentials: 📌 Certified Information Systems Security Professional (CISSP) — ISC2 USA 📌 Certified Information Security Manager (CISM) — ISACA USA 📌 Certified Information Security Auditor (CISA) — ISACA USA 📌 ISO 27001 Lead Auditor (LA) — IRCA UK 📌 Certified in Cybersecurity (CC) — ISC2 USA 📌 Certified Computer Hacking & Forensics Investigator (CHFI) — EC Council 📌 MPhil, Information Security | BSc, Computer Science 🔹 Selected Projects: 📌 ISO 27001:2022, ISO 27017, ISO 27018 & Data Protection Trust Mark (DPTM) — Leading Telecom Company, Singapore 📌 SAMA CSF & PDPL Compliance — Banks in Egypt and Saudi Arabia 📌 ISO 27001 Cybersecurity Audit — Fintech Company, Bahrain 📌 GRC Tool Implementation Consultation — IT Firm, Oman 📌 IT/Cybersecurity Audit Services — Group of Companies, UAE 📌 ISO 27001 Implementation — Consulting, Retail, and Fertilizer Sector Firms 💡 Whether you're starting from scratch or preparing for an imminent audit, I'll help you build a compliance program that's audit-ready, sustainable, and tailored to your industry. 📩 Send me an invite — let's talk about your timeline and goals.