# Khan Imdad Ullah

Khan Imdad Ullah is a remote worker on Himalayas, Information Security GRC Consultant at Celticsecure Limited, based in Ireland.

Source: https://himalayas.app/@khanimdadullah

```text
I lead cybersecurity governance, risk, compliance, and operational resilience programs.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Ireland |
| Authorized to work in | Ireland |
| Salary expectations | 95k+ USD |
| Job categories | GRC Consultant, Information Security Manager, IT Security Consultant, IT Security Specialist, Information Security Specialist |
| Skills | Infosec, Governance Risk And Compliance, ISO 27001, ISO 42001, GDPR, NIST, PCI DSS, Risk Assessment, Security Auditing, Policy Development, ISMS, Network Security, Business Continuity Planning, Disaster Recovery, EU AI Act, Security Awareness, IT Compliance, IT Security Controls, DORA, EBA Guidelines, ICT Risk Management, Third Party Risk Management, Security Governance, Operational Resilience, Controls Assurance, Compliance Monitoring, Regulatory Compliance, Audit Management, Risk Register Management, NCA ECC, SAMA CSF, COBIT, Data Privacy, Gap Analysis, Vulnerability Assessment, Access Control, Cisco, Juniper, Business Impact Analysis (BIA), Privacy Impact Assessment, Records Of Processing (ROPA), Phishing Simulations, CISA, CISM, CRISC, ISMS ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, CCSP, CCNA, MCP, MCSE |
| Website | https://khanimdadullah.org |
| LinkedIn | https://linkedin.com/in/khan-imdadullah-phd-scholar-270385195 |

## What I'm looking for

```text
I'm looking to lead information security governance, compliance, risk, and operational resilience programs, translating ISO 27001, DORA, GDPR, NIST, and regulatory requirements into effective controls, assurance, and executive reporting.
```

## About

```text
At Celticsecure, I lead organization-wide security compliance programs, aligning IT activities with governance and regulatory requirements. I deliver ISO 27001, NIST, COBIT, PCI-DSS, DORA, GDPR, and security policy initiatives.

Previously, I led information security governance for Versos Solution supporting Al Rajhi Bank, Emkan Finance, and Ejada Finance, and managed GRC programs for United Bank Limited and AISL Credit Bureau. My work includes risk assessments, internal audits, architecture reviews, PCI-DSS compliance, and reporting to management.

Across Ireland, Saudi Arabia, and Pakistan, I've built ISMS, ICT risk, third-party risk, business continuity, disaster recovery, privacy governance, and security awareness programs. I bring 15+ years of experience turning regulatory requirements into practical controls, assurance, and executive reporting.
```

## Experience

### Information Security GRC Consultant (current)

Celticsecure Limited. Feb 2023 - Present

```text
Lead organization-wide information security compliance programs, ensuring IT activities align with governance and regulatory requirements. Develop and enforce security policies, processes, and standards for ISO 27001, NIST, COBIT, PCI-DSS, and DORA.
```

Skills: Infosec, GRC, ISO-27001, NIST, COBIT, PCI-DSS, DORA, GDPR, Risk-Assessment, Security-Auditing, Policy-Development, ISMS, Compliance-Monitoring, Regulatory-Compliance

### Information Security GRC Manager

Versos Solution. Oct 2019 - Jan 2023

```text
Led the information security compliance and governance program, ensuring IT processes met defined regulatory policies. Conducted architecture reviews of network security designs quarterly as per NCA, ISO, NIST, COBIT, PCI-DSS, and SAMA standards.
```

Skills: Infosec, GRC, NCA, ISO, NIST, COBIT, PCI-DSS, SAMA, Network-Security, Security-Auditing, Policy-Development

### Information Security GRC Manager

United Bank Limited. Apr 2017 - Oct 2019

```text
Developed and enforced Information Security policies for banking and financial institutions. Conducted security reviews, risk assessments, and IT internal audits across departments, and managed PCI-DSS, CIS, and ISO 27001 compliance programs.
```

Skills: Infosec, GRC, PCI-DSS, CIS, ISO-27001, Risk-Assessment, Security-Auditing, BCP, Disaster-Recovery

### ICT Security Consultant

Atheeb Telecom. Jan 2015 - Jan 2017

```text
Led ISMS reviews, risk assessments, policy development, and implementation. Managed BCP and DR planning, including security drills, and ensured security compliance for ISO 27001 and other frameworks.
```

Skills: ISMS, Risk-Assessment, Policy-Development, BCP, DR迁移数据校验, ISO-27001, Security-Compliance

### Information Security Specialist

Saudi Tabadul. Mar 2012 - Jan 2015

```text
Conducted vulnerability assessments for internal networks and applications. Implemented access control rules and security risk assessments, and developed security awareness training programs.
```

Skills: Vulnerability-Assessment, Access-Control, Risk-Assessment, Security-Awareness, Firewall-Rule-Audit, Network-Security

### IT Security Specialist

Business Solution Est. Jun 2010 - Feb 2012

```text
Monitored and managed Cisco and Juniper security devices in a data center. Designed, deployed, and troubleshot core network operations, and conducted end-to-end connectivity testing on fiber optic networks.
```

Skills: Cisco, Juniper, Network-Security, Data-Center, Troubleshooting, Fiber-Optics

## Education

### Lincoln University, Malaysia

Ph.D., Information Technology

```text
Ph.D. in Information Technology, currently in process.
```

### PIMSAT, Pakistan

Master of Science, Computer Science. 2010 - 2012

```text
Masters in Computer Science from PIMSAT, Pakistan, completed in July 2012.
```

## Tech stack

- Juniper

To contact Khan, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Graciela Garrido](https://himalayas.app/@gracielagarrido): SOC Manager & Senior Cyber Security Engineer, Tata Consultancy Services
- [Keerthi Prabhakar](https://himalayas.app/@keerthiprabhakar): Senior Insider Risk Engineer, Twilio
- [Siddhant siddhant](https://himalayas.app/@siddhantsiddhant): Cyber Security Professor, City College
- [Patricia Hernandez](https://himalayas.app/@nicolehp): Governance, Risk & Compliance Analyst, Schneider Electric
- [Francesco Citti](https://himalayas.app/@francescocitti): Associate Security Engineer, Phorest Saloon Software
- [Nana Arezie Oduro-Asare](https://himalayas.app/@nanaarezieoduro-asar): Senior Manager, FSO Tech Resilience, EY Ireland
- [Dami Obasa](https://himalayas.app/@damiobasa): IT & Security Consultant, Large Assurance
- [Julia Tsavalas](https://himalayas.app/@juliatsavalas): Security and Compliance Specialist, CreditLogic
- [Nikhil Somashekarappa](https://himalayas.app/@nikhilsomashekarappa): Senior IT Risk Specialist, PTSB
- [Daniel Hockey](https://himalayas.app/@danielhockey): Research Engineer Audits and Compliance, Tenable