Open to opportunities

Aisha Rehman

@aisharehman1

Message

I strengthen information security governance, ISO 27001 compliance, risk management, and application security controls.

Pakistan

Message

What I'm looking for

I'm looking to contribute to information security, GRC, compliance, and risk-management work where I can strengthen controls, support audit readiness, and partner with technical and business teams on remediation.

At Lucky Cement Limited, I manage the information security risk register and support ISO 27001:2022 compliance, audits, control implementation, and remediation tracking.

I develop security policies and controls, review SAP access, segregation-of-duties, and change-management controls, and work with IT, infrastructure, applications, and SOC stakeholders to address risk.

Previously, I assessed application architectures and technical environments at Mozack, improving security controls through vulnerability reviews and risk-based recommendations. My background combines Computer Engineering, ongoing Cybersecurity studies, and practical work with SIEM, endpoint security, vulnerability management, and network infrastructure.

Experience

Work history, roles, and key accomplishments

Current

Information Security & Governance Officer

Current

Lucky Cement Limited

Jan 2025 - Present (1 year 9 months)

Manage the organization's information security risk register and drive cybersecurity initiatives. Support ISO 27001:2022 compliance activities, develop security policies, and conduct audits of SAP internal application controls.

ISO 27001 Risk Management Security Governance Compliance Audits Policy Development SAP Controls Segregation of Duties Change Management Security Metrics KPIs SIEM Vulnerability Management Disaster Recovery Security Awareness

Application Security Analyst

Mozack

Aug 2023 - Dec 2024 (1 year 4 months)

Conducted security assessments of application architectures and technical environments, identifying weaknesses and recommending remediation. Performed vulnerability reviews and developed security policies aligned with ISO 27001 and NIST.

Application Security Vulnerability Assessment Security Testing ISO 27001 NIST Security Policies Risk Based Recommendations

Information Security and GRC Analyst

Alfalah Investments

Aug 2024 - Oct 2024 (2 months)

Supported information security governance and compliance activities, including audit preparation and coordination. Assisted in monitoring security and network controls to support operational resilience.

Infosec GRC Compliance Audit Preparation Security Monitoring Network Controls

Information Technology Intern

State Bank of Pakistan

Jun 2023 - Jul 2023 (1 month)

Gained exposure to enterprise IT operations, infrastructure, networking, web hosting, information security, and technology governance functions within a regulated financial institution.

IT Operations Infrastructure Networking Web Hosting Infosec Technology Governance