Usman M.
Pentesting & Compliance Consultant | ISO 27001, GDPR, HIPAA, NIST.
I help startups and enterprises achieve audit-ready security and pass certifications like ISO 27001, HIPAA, GDPR, and PCI-DSS on the first attempt. If you need compliance, documentation, penetration testing, or cloud hardening — I deliver fast, clear, audit-approved results. 🔐Services I Provide Compliance & Audit Preparation * ISO 27001 Implementation (ISMS Build, Documentation, Audit Support) * GDPR, HIPAA, PCI-DSS & NIST CSF Frameworks * Gap Analysis, SoA, Risk Register, Compliance Roadmaps * Security Policies (Access Control, IRP, BCP/DRP, AUP, etc.) Security Testing & Hardening * Penetration Testing (Web Apps, Networks, Cloud Environments) * Vulnerability Assessment (4,000+ vulnerabilities analyzed) * Red Team Engagements & Phishing Simulation * Incident Response Planning & Threat Mitigation Cloud Security * AWS / Azure / GCP Hardening & Misconfiguration Fixes * Zero Trust Controls & Secure Architecture * On-Prem + Hybrid Infrastructure Security Proven Results * FinTech SaaS::ISO 27001 certification in 8 weeks, 0 non-conformities * Healthcare SaaS::HIPAA + SOC2 alignment — saved $15K+ in audit prep * E-Commerce / PCI-DSS:: Level 1 compliance restored — secure payment flow * Cloud Security::200+ misconfigurations eliminated across AWS/GCP ⭐ Why Clients Choose Me ✔ Clear, non-technical communication (no jargon confusion) ✔ Auditor-approved templates to save 100+ hours of workload ✔ Actionable pentest reports — real fixes, not scanner dumps ✔ 24/7 critical support options available ✔ 100% satisfaction guarantee — zero risk to start
Earnings and projects
Last 6 months ÷ 6
Last 6 months: $149
Billed in all: $3,063$3.1k
$149 in the last 6 months
Across 15 contracts
Earnings, last 30 days
Skill rankings: Top 27% in Certified Information Security Manager
Ranked by MRR among everyone on Upwork with the skill.
- #4Certified Information Security Manager15 freelancers · 🇵🇰 #2Top 27%🇵🇰#2 of 3
- #24Information & Communications Technology52 freelancers · 🇵🇰 #2Top 46%🇵🇰#2 of 3
- #37NIST SP 800-5384 freelancers · 🇵🇰 #4Top 44%🇵🇰#4 of 9
- #47Security Policies & Procedures Documentation123 freelancers · 🇵🇰 #6Top 38%🇵🇰#6 of 15
- #59Incident Response Plan120 freelancers · 🇵🇰 #15Top 49%🇵🇰#15 of 20
- #74Cybersecurity Tool201 freelancers · 🇵🇰 #14Top 37%🇵🇰#14 of 37
- #102NIST Cybersecurity Framework241 freelancers · 🇵🇰 #10Top 42%🇵🇰#10 of 29
- #116Ethical Hacking320 freelancers · 🇵🇰 #32Top 36%🇵🇰#32 of 67