At R.I.S.K Company, I conduct information security and ISMS audits against ISO/IEC 27001:2022 and applicable regulatory requirements for banking, government, and other clients.
I assess security controls across areas including access management, vulnerability management, network security, and incident management. I identify gaps and vulnerabilities, then prepare risk-based remediation recommendations and assessment reports aligned with ISO, NIST, and OWASP practices.
I develop and review ISMS documentation, maintain risk registers, and track remediation activities. I also deliver security awareness training and phishing simulations for clients.
Earlier, as a Cyber Security Engineering Intern at Caspian Innovation Center, I gained hands-on exposure to DLP, XDR, SIEM, and vulnerability scanning solutions. I hold CISA, CISM, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, OSCP, and CEH Practical certifications.
