Faridul A.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Compliance without the guesswork — and a consultant who can actually implement the controls. I'm Faridul, a cybersecurity consultant with 15+ years across GRC, security architecture, and network/cloud security engineering. Most GRC consultants can write you a policy. Most engineers can configure a firewall. I do both - so when an audit finding lands, I don't just log it in a risk register and hand it to someone else. I close it. COMPLIANCE & AUDIT READINESS ISO 27001 (ISMS build, gap assessment, internal audit, Stage 1/2 preparation) · PCI DSS (scoping, segmentation validation, SAQ/RoC support, ASV scan coordination) · SOC 2 · GDPR · HIPAA · NIST CSF · CIS Controls · Cyber Essentials · PDPL (GCC) · SAMA/NCA · PDPL...etc. RISK MANAGEMENT & THIRD-PARTY RISK Enterprise risk registers and treatment plans · cross-framework control mapping · vendor risk tiering and TPRM programs · security questionnaire response · attack surface and supply chain monitoring SECURITY AUDITS & TECHNICAL ASSESSMENTS Firewall rulebase review, cleanup and recertification · configuration hardening against CIS benchmarks · vulnerability assessment · penetration test remediation · cloud posture review (CSPM/CIEM) · policy and architecture gap analysis SECURITY ARCHITECTURE Zero Trust and ZTNA/SASE design · network segmentation (including PCI CDE scoping) · NGFW architecture, migration and hardening · SD-WAN · IAM/PAM · cloud security across AWS, Azure and GCP. Every engagement ships with documentation: HLD, LLD, BoQ/BoM, runbooks, phased delivery plans. SOC & DETECTION 24/7 SOC leadership · SIEM/SOAR deployment and tuning · detection use-case development · playbook design · incident response process build-out CERTIFICATIONS AWS Solutions Architect: Professional (SAP-C02) and Associate (SAA-C03) Fortinet Certification: NSE7, NSE5, NSE4 Check Point Certification: CCME, CCSE, CCSA, CCTA, CCTE (Security Master) Cisco Certification: CCNP R&S, CCNA Security, CCNA R&S SECURITY TRAINING & TEAM ENABLEMENT Vendor-specific, hands-on training delivered by someone who deploys these platforms in production — not a slide reader working from a courseware pack. Fortinet - FortiGate administration and policy design, FortiManager ADOM workflows and centralized policy push, FortiAnalyzer reporting and log analysis, FortiSwitch/FortiAP fabric integration, FortiNAC onboarding, SD-WAN and ADVPN overlay configuration, HA (FGCP/FGSP), VDOM design. Aligned to NSE4 to NSE7 exam tracks for teams working toward certification. Check Point - SmartConsole and policy layers, gateway and cluster deployment, Maestro orchestration, HTTPS inspection, Threat Prevention profiles, log analysis and troubleshooting. Aligned to CCSA/CCSE progression. Cisco - routing and switching fundamentals through to BGP/OSPF design, ASA and Firepower administration, ISE and 802.1x deployment, segmentation and ACL discipline. Aligned to CCNA/CCNP tracks. Palo Alto, F5, Zscaler and others - platform administration, policy design and operational runbook training drawn from live deployment and migration experience. Cross-vendor and operational · Firewall rulebase hygiene, recertification and cleanup methodology · Migration workshops - Cisco/Check Point → Fortinet and other vendor transitions · Network segmentation design, including PCI CDE scoping · Cloud security across AWS, Azure and GCP · SOC analyst development - triage discipline, SIEM tuning, detection use-case authoring, tabletop exercises · Security awareness programs mapped to ISO 27001 A.6.3, PCI DSS 12.6 and HIPAA workforce training clauses, with attendance and assessment evidence ready for the auditor · Board and executive briefings translating audit findings into budget decisions Delivered live (remote or on-site) or as recorded modules. Every program ships with lab guides, slide decks, runbooks and knowledge checks so your team can re-run it internally. TYPICAL ENGAGEMENTS · ISO 27001 gap assessment through to certification readiness · PCI DSS scope reduction via network segmentation, then evidence pack for the QSA · Firewall rulebase audit and cleanup ahead of an external assessment · Cloud security posture review with a prioritised, costed remediation roadmap · Fractional security architect / vCISO-style advisory on retainer · Vendor risk programme design and rollout HOW I/WE START Tell me the framework, the deadline, and where you think the gaps are. I'll come back with a scoped plan - phases, deliverables, timeline - before you commit to anything. Fixed-price for defined scopes, hourly for ongoing advisory. Happy to do a short call first to confirm fit. Compliance · ISO 27001 · PCI DSS · Security Assessment · Risk Assessment · Governance, Risk & Compliance · SOC 2 · SAMA/NCA · PDPL · MITRE · CIS Control · Information Security · Security Policies & Procedures · Vendor Management · Cloud Security · Network Security · Firewall · Security Architecture · NIST Cybersecurity Framework · Training.