Looking for a job

Khan Imdad Ullah

@khanimdadullah

Message

I lead cybersecurity governance, risk, compliance, and operational resilience programs.

Ireland

Message

What I'm looking for

I'm looking to lead information security governance, compliance, risk, and operational resilience programs, translating ISO 27001, DORA, GDPR, NIST, and regulatory requirements into effective controls, assurance, and executive reporting.

At Celticsecure, I lead organization-wide security compliance programs, aligning IT activities with governance and regulatory requirements. I deliver ISO 27001, NIST, COBIT, PCI-DSS, DORA, GDPR, and security policy initiatives.

Previously, I led information security governance for Versos Solution supporting Al Rajhi Bank, Emkan Finance, and Ejada Finance, and managed GRC programs for United Bank Limited and AISL Credit Bureau. My work includes risk assessments, internal audits, architecture reviews, PCI-DSS compliance, and reporting to management.

Across Ireland, Saudi Arabia, and Pakistan, I've built ISMS, ICT risk, third-party risk, business continuity, disaster recovery, privacy governance, and security awareness programs. I bring 15+ years of experience turning regulatory requirements into practical controls, assurance, and executive reporting.

Experience

Work history, roles, and key accomplishments

Current

Information Security GRC Consultant

Current

Celticsecure Limited

Feb 2023 - Present (3 years 7 months)

Lead organization-wide information security compliance programs, ensuring IT activities align with governance and regulatory requirements. Develop and enforce security policies, processes, and standards for ISO 27001, NIST, COBIT, PCI-DSS, and DORA.

Infosec GRC ISO 27001 NIST COBIT PCI DSS DORA GDPR Risk Assessment Security Auditing Policy Development ISMS Compliance Monitoring Regulatory Compliance

Information Security GRC Manager

Versos Solution

Oct 2019 - Jan 2023 (3 years 3 months)

Led the information security compliance and governance program, ensuring IT processes met defined regulatory policies. Conducted architecture reviews of network security designs quarterly as per NCA, ISO, NIST, COBIT, PCI-DSS, and SAMA standards.

Infosec GRC NCA ISO NIST COBIT PCI DSS SAMA Network Security Security Auditing Policy Development

Information Security GRC Manager

United Bank Limited

Apr 2017 - Oct 2019 (2 years 6 months)

Developed and enforced Information Security policies for banking and financial institutions. Conducted security reviews, risk assessments, and IT internal audits across departments, and managed PCI-DSS, CIS, and ISO 27001 compliance programs.

Infosec GRC PCI DSS CIS ISO 27001 Risk Assessment Security Auditing BCP Disaster Recovery

ICT Security Consultant

Atheeb Telecom

Jan 2015 - Jan 2017 (2 years)

Led ISMS reviews, risk assessments, policy development, and implementation. Managed BCP and DR planning, including security drills, and ensured security compliance for ISO 27001 and other frameworks.

ISMS Risk Assessment Policy Development BCP DR迁移数据校验 ISO 27001 Security Compliance

Information Security Specialist

Saudi Tabadul

Mar 2012 - Jan 2015 (2 years 10 months)

Conducted vulnerability assessments for internal networks and applications. Implemented access control rules and security risk assessments, and developed security awareness training programs.

Vulnerability Assessment Access Control Risk Assessment Security Awareness Firewall Rule Audit Network Security

IT Security Specialist

Business Solution Est

Jun 2010 - Feb 2012 (1 year 8 months)

Monitored and managed Cisco and Juniper security devices in a data center. Designed, deployed, and troubleshot core network operations, and conducted end-to-end connectivity testing on fiber optic networks.

Cisco Juniper Network Security Data Center Troubleshooting Fiber Optics