Taha S.

Greetings! I am Muhammad Taha Siddiqui, a Cyber Security Consultant with over 10 years of industry experience. I hold a Master's degree in Information Security and currently serve as a Senior Cyber Security Consultant in a US based firm, specializing in GRC consultancy services. My expertise spans ISO27001, HIPAA, NIS2, DORA, GDPR, SOC2, NIST CSF, NIST 800-171 compliance, penetration testing, and vulnerability assessments. Services I Offer: 1. ISO 27001 Implementation & Consultancy - End-to-end design, implementation, and certification support for Information Security Management Systems (ISMS). - Gap analysis, risk treatment planning, and technical guidance on implementation of controls. 2. Compliance Audits - Internal Audits aligned with SOC 2, ISO 27001, HIPAA, and other regulatory standards. - Pre-certification readiness assessments and corrective action plans. 3. Policy & Procedure Development - Customized cybersecurity policies, SOPs, and playbooks compliant with ISO 27001, GDPR, SOC 2, and HIPAA. - Policy review/alignment for evolving threats and regulations. 4. Risk Assessments & Audits - Risk-based assessments to identify vulnerabilities and prioritize remediation. - Quantitative/qualitative risk analysis with actionable mitigation strategies. 5. Penetration Testing & Vulnerability Management - Comprehensive testing for web apps, APIs, Android apps, networks, and cloud environments (AWS/Azure/GCP). - Detailed reports with remediation guidance and retesting support. 6. GDPR Compliance - Data Protection Impact Assessments (DPIAs) and GDPR compliance roadmaps. - Breach response planning and EU representative services. 7. GRC Advisory Services - Strategic guidance for ISO 27001, SOC2, NCA ECC, NIS2, EU DORA, and HIPAA. - Governance alignment, third-party risk management, and audit preparation. -------------------MY JOURNEY--------------------------- As a dedicated cybersecurity professional, I’ve successfully delivered projects across Penetration Testing, Risk Management, and compliance frameworks including ISO 27001, HIPAA, NCA ECC, and SOC2. My expertise includes designing tailored compliance roadmaps, conducting vulnerability assessments, and aligning organizations with international standards to mitigate risks and avoid penalties. Notably, I managed a World Bank-funded cybersecurity initiative, developing and implementing an ISO 27001-based program that streamlined governance processes and enhanced the organization’s security posture. Whether safeguarding sensitive data, achieving compliance, or hardening systems against threats, I combine technical controls with strategic insights to deliver measurable results for clients in regulated industries. WHY PARTNER WITH ME? ✅ Certified expertise in global frameworks (e.g., NIST, ISO 27001, SOC2, NCA ECC, HIPAA, GDPR). ✅ Proven track record in high-stakes environments (financial, healthcare, IT, government). ✅ Remote-friendly workflow with clear communication across time zones. -------------------CERTIFICATIONS AND ACHIEVEMENTS--------------------------- I hold the following certifications and achievements: - ISO27001 Lead Auditor. - Certified Multi-Cloud Red Team Analyst. - Qualys Certified Specialist. - IBM Cyber Security Analyst (Professional Certificate by IBM). - GDPR Data Protection Officer Skills, University of Derby. - Burp Suite Mastery (Web Application Security Testing Tool). - Fortinet Network Security Expert, NSE 1 & NSE 2. - Certified Network Security Specialist. - AWS Security Fundamentals. - Cybersecurity Threat Landscape. - Information Security Incident Handling, Charles Sturt University, Australia. - Hacking Countermeasures, Charles Sturt University, Australia. - CISM Prep. - CISA (MS Coursework equivalent to CISA) - Knowledge of CISSP (MS Coursework equivalent to CISSP) I look forward to collaboration. Kind regards! Cyber Security Consultant, Muhammad Taha Siddiqui.