Ahmad J.

Certified Cybersecurity & GRC Specialist for IT & OT/ICS Environments Building a company is hard enough — security and compliance shouldn’t slow you down. 🚀I help industrial operators, critical infrastructure providers, and high-growth technology companies secure their environments and meet regulatory requirements — without slowing down operations or product delivery. With a decade of experience spanning both IT and OT domains, including a background at Siemens and IEC 62443 Certified Expert credentials, I bring rare cross-domain depth: I understand SCADA, PLCs, and industrial protocols as well as I understand ISMS frameworks, cloud security, and compliance audits. - Governance, Risk & Compliance ISO 27001 ISMS design, implementation, and certification support SOC 2, GDPR, NIS2, and HIPAA readiness Risk assessments, gap analysis, and internal audits Security policies and procedures built for operational reality, not shelfware Security questionnaire and vendor assessment management (RFPs, enterprise due diligence) - OT / ICS / SCADA Security IEC 62443-aligned security programs for industrial control environments Purdue Model network architecture review and segmentation design OT asset inventory, network traffic analysis, and vulnerability assessment SCADA/HMI access control and configuration review OT/IT convergence risk assessments and gap analysis Vendor and protocol-specific security reviews (DNP3, Modbus, SNMP, and others) Security roadmaps tailored to plant, utility, and energy environments Cloud & Application Security AWS, Azure, and GCP security configuration and hardening Vulnerability Assessments and Penetration Testing (VAPT) Practical remediation planning that prioritizes business-critical risk Why Work With Me Most consultants specialize in IT compliance or OT security — rarely both. I bridge that gap, which matters increasingly as industrial environments converge with cloud and enterprise IT. Clients get a single point of accountability across their full risk surface, from the plant floor to the cloud.🏆 What I Do for You ✔️Implement ISO 27001-compliant Information Security Management Systems (ISMS) ✔️Prepare you for SOC 2, ISO 27001, GDPR, HIPAA, and other regulatory requirements ✔️Conduct risk assessments, gap analysis, and internal audits ✔️Develop practical, startup-friendly security policies and procedures ✔️Handle security questionnaires (RFPs, enterprise clients, vendor assessments) ✔️Secure cloud environments (AWS, Azure, GCP) ✔️Perform Vulnerability Assessments and Penetration Testing (VAPT) ✔️Identify, prioritize, and fix security gaps without slowing your team ✔️Designed for High-Growth Companies 👨‍💼I understand the challenges of scaling businesses: - Limited time and resources - Pressure to close enterprise deals - Increasing compliance demands - Need for fast, practical security solutions 🔐 That’s why I focus on lightweight, scalable, and business-aligned security programs — not unnecessary complexity. 🛠 TECH STACK Governance: Vanta, Drata, Sprinto, Secureframe. Cloud: AWS, Azure, Google Cloud (GCP). 📊 SECURITY AND COMPLIANCE FRAMWORKS SOC 2 | ISO 27001 | ISO 27017 | ISO 27018 | ISO 42001 | NIST 800-53 | NIST 800-171 | NIST CSF | NIST AI RMF | FedRAMP | CMMC | CMMI | PCI-DSS | HIPAA | HITRUST CSF | GDPR | TISAX | NERC | FFIEC | C5 | ENISA | CIS CSAT | IRAP | PIPEDA | TX-RAMP | StateRAMP | AZ-RAMP | NY DFS 23 NYCRR Part 500 | EU AI Act HOW I WORK Think of me as your outsourced security partner. You build, sell, and grow your business — I handle your security, compliance, and risk management end-to-end. No jargon. No over-engineering. Just practical security that helps you move faster and win trust. 𝗜𝗳 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝘀 𝗯𝗹𝗼𝗰𝗸𝗶𝗻𝗴 𝗴𝗿𝗼𝘄𝘁𝗵, 𝗺𝗲𝘀𝘀𝗮𝗴𝗲 𝗺𝗲. 𝗜'𝗹𝗹 𝘁𝗮𝗸𝗲 𝗶𝘁 𝗳𝗿𝗼𝗺 𝗵𝗲𝗿𝗲. 𝗕𝗼𝗼𝗸 𝗮 𝗳𝗿𝗲𝗲 𝟲𝟬-𝗺𝗶𝗻𝘂𝘁𝗲 𝗮𝗱𝘃𝗶𝘀𝗼𝗿𝘆 𝗰𝗮𝗹𝗹. 𝗜'𝗹𝗹 𝗺𝗮𝗽 𝘁𝗵𝗲 𝗳𝗮𝘀𝘁𝗲𝘀𝘁 𝗽𝗮𝘁𝗵 𝗳𝗼𝗿𝘄𝗮𝗿𝗱.