# Kamran Mammadov

Kamran Mammadov is a remote worker on Himalayas, Information Security Auditor at R.I.S.K Company, based in Azerbaijan.

Source: https://himalayas.app/@kamranmammadov

```text
Information Security Auditor at R.I.S.K Company conducting ISO 27001 audits and delivering risk-based remediation recommendations.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Azerbaijan |
| Authorized to work in | Azerbaijan |
| Salary expectations | 55k+ USD |
| Job categories | Information Security Auditor, GRC Consultant |
| Skills | ISO 27001, ISMS Auditing, ISMS Implementation, Risk Assessment, Risk Treatment, Control Testing, Gap Analysis, Regulatory Compliance, Audit Reporting, Vulnerability Assessment, Web Application Security, Network Security, Active Directory, NIST, OWASP |

## About

```text
At R.I.S.K Company, I conduct information security and ISMS audits against ISO/IEC 27001:2022 and applicable regulatory requirements for banking, government, and other clients.

I assess security controls across areas including access management, vulnerability management, network security, and incident management. I identify gaps and vulnerabilities, then prepare risk-based remediation recommendations and assessment reports aligned with ISO, NIST, and OWASP practices.

I develop and review ISMS documentation, maintain risk registers, and track remediation activities. I also deliver security awareness training and phishing simulations for clients.

Earlier, as a Cyber Security Engineering Intern at Caspian Innovation Center, I gained hands-on exposure to DLP, XDR, SIEM, and vulnerability scanning solutions. I hold CISA, CISM, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, OSCP, and CEH Practical certifications.
```

## Experience

### Information Security Auditor (current)

R.I.S.K Company. Oct 2022 - Present

```text
Conducts information security and ISMS audits against ISO/IEC 27001:2022 and regulatory requirements for banking and government clients. Evaluates control design and effectiveness, identifies gaps, and prepares risk-based remediation recommendations and reports.
```

Skills: ISO-27001, ISMS-Auditing, Risk-Assessment, Risk-Treatment, NIST, OWASP, Access-Management, Asset-Security, Vulnerability-Management, Network-Security, Logging, Incident-Management, Business-Continuity, Supplier-Security-Framework, Audit-Reporting, Security-Awareness, Phishing-Simulations, Mentorship

### Cyber Security Engineering Intern

Caspian Innovation Center. Jun 2021 - Aug 2021

```text
Gained hands-on exposure to configuration and integration of DLP, XDR, SIEM, and vulnerability scanning solutions. Supported learning and practical work relating to network, database, and other infrastructure security controls.
```

Skills: DLP, XDR, SIEM, Vulnerability-Scanning, Network-Security, Database-Security, Infrastructure-Security

## Education

### University of Birmingham

Master of Science, Cyber Security. 2024 - 2025. Grade: Distinction

```text
MSc in Cyber Security with Distinction, fully funded scholarship.
```

### Baku Higher Oil School

Bachelor of Science, Information Security. 2019 - 2024. Grade: GPA: 4.0

```text
BSc in Information Security with GPA 4.0, Presidential Scholarship.
```

## Tech stack

- MySQL
- JavaScript
- Python
- SQL
- Bash

To contact Kamran, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Lalə Qubatova](https://himalayas.app/@lalqubatova): Intern in Information Security Strategy and Risk Management, Kapital Bank
- [Emil Ahmadov](https://himalayas.app/@emilahmadov): Lead Cybersecurity Specialist, Innovation and Digital Development Agency
- [Rəvan Hüseynli](https://himalayas.app/@rvanhseynli): Information Security Intern, Pasha Life OJSC
- [Teymur Aminov](https://himalayas.app/@teymuraminov): L1 SOC Analyst, Pasha Bank OJSC
- [Elman Heydarli](https://himalayas.app/@elmanheydarli): Security Architect, Bir Ecosystem
- [Azerin Beyali](https://himalayas.app/@azerinbeyali): Cybersecurity Engineer, GuardianLab
- [Yagub Hajiyev](https://himalayas.app/@yagubhajiyev1): Cyber Security Engineer, GuardianLab LLC
- [Tofiq Mammadov](https://himalayas.app/@tofiqmammadov): Information Security Intern, Azerpost LLC
- [Cebrayil Tagiyev](https://himalayas.app/@cebrayiltagiyev): Head of Offensive Security Unit, B&B Security
- [Toghrul Mustafali](https://himalayas.app/@toghrulmustafali): Cybersecurity Lecturer, Baku Engineering University