Jaipravin S.

Senior Consultant, Security & Cyber Resilience, based in Dubai. 16 ISMS implementations, 12 internal audits and an ISO 27035 incident framework that cut response time by 35%. I help regulated firms in the UAE and GCC get audit-ready on ISO 27001, ISO 22301 and DESC/Dubai ISR, and stay resilient when something breaks. What I help clients with - ISO 27001, 27701, and 22301 implementation and certification readiness - SOC 2 readiness (Type 1 & 2), including hands-on Vanta configuration and evidence collection - Regulatory gap assessments: DESC ISR, UAE IA Standards, CBUAE ISR, NIST SP 800-171, CMMC, PCI DSS - Risk-based internal audits (ISMS, PIMS, NIST CSF), SOX/ICFR and ITGC/ITAC audits - Vulnerability assessments and penetration testing, translated into remediation roadmaps your team can actually act on How I work Scope gets confirmed in writing before anything starts, so there's no ambiguity about what "done" looks like. Findings get written for whoever has to act on them, not just whoever has to file them. And I check back in after sign-off, because an engagement ending doesn't mean I've disappeared. Results clients have seen - ISO 27001/27701 internal audit: compliance score up 35%, risk exposure down 40% - IT & security transformation: 40% IT efficiency gain, 60% fewer incidents - ITGC audit: 46 control gaps identified and remediated, aligned to COBIT & ISO 27001 - SOX & ICOFR audits: both audit cycles delivered 15% ahead of schedule, with a 35% reduction in control deficiencies Tools & platforms: Vanta, Forcepoint DLP, Boldon James, KnowBe4, PhishingBox, AWS, Azure, Archer, ServiceNow, CrowdStrike, SentinelOne I'm based in Dubai and available for remote engagements across the GCC and beyond, evenings and weekdays, plus weekends. Send me a message with what you're working on and you'll have a scoped response within 24 hours.