Muhammad Hammad A.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Oct 27, 2026.

🏆 Top 3% on Upwork. ✅ Fluent English. ✅ Swift response and communications. I have more than 15 years of experience as a consultant, auditor & trainer in multinational organisations including Deloitte. I have developed strong expertise pertaining to gap assessment, risk assessment, information security documentation, information security governance, cyber security documentation, cyber security governance,and cyber security training. 👉 Below are my educational achievements: 🏆 CISSP-------(Certified Information Systems Security Professional) 🏆 HITRUST Certified CSF Practitioner-------(CCSFP) 🏆 CISM-------(Certified Information Security Manager) 🏆 CISA-------(Certified Information System Auditor) 🏆 CDPSE-------(Certified Data Privacy Solutions Engineer) 🏆 CCSK-------(Certificate of Cloud Security Knowledge) 🏆 ISO 27001-------Lead Implementer & Lead Auditor 🏆 ISO 22301-------Lead Implementer 🏆 MSc, BSc-------(Computer Engineering) 🏆 MBA Executive I also have extensive experience with a wide range of standards and regulations such as PCI DSS, ISO 27001, 27017, 27018, 22301, 37301, 31000 GDPR, HIPAA, HITRUST, NIST, SOC 2, SAMA CSF and NCA Standards in KSA. Furthermore, I have published 2 IEEE research papers and one journal paper, all related to cybersecurity. 👉Few examples of successfully delivered numerous projects related to cybersecurity, data protection, risk management, audit, and technology governance. ✅ Cybersecurity policies set for MechaPal, Japan ✅ HIPAA, HITRUST compliance for Healthtech startup in US ✅ GRCaaS project for Saudi Industrial Cities (Second year in progress) ✅ PCI DSS project for Bsecure (Fintech) ✅ SAMA CSF compliance documentation which includes risk management framework for Saudi Home Loans, Manafa Capital, MISForward, AlSagr Insurance, Alrajhi Takaful, MedGulf ✅ Data Protection Project for Saudi Government Agency ✅ HIPAA and NIST CSF compliance mapping for Security Scorecard, USA ✅ GDPR compliance project for Visionet, USA ✅ IT audit of Pakistan largest G2P program: BISP ✅ PCI DSS compliance project at Askari Bank, BAB, Fintechs (Bsecure, Tweeq, Tiqmo) ✅ Risk Assessment, VAPT and ITGC project at Mobilink Microfinance Bank ✅ ISO 27001 Project for SECP (Pakistan) & Emergent Payment (Ghana), HTS (Pakistan), Skyband (KSA), Modon (KSA), Volga Partners (USA), Skyband(KSA), RES(KSA) , Zepto Systems(Pakistan) ✅ Policy Development for MDC, UK ✅ ETGRM compliance for Telenor bank, Pakistan ✅ Data protection policy and security manual for Faceki, Bahrain ✅ Security policies development required by Master Card for mybook, Qatar