Open to opportunities

mahpara amil

@mahparaamil

Message

I am an information security manager specializing in GRC, ISO27001, and risk management.

Pakistan

Message

What I'm looking for

I’m seeking an Information Security or GRC leadership role to implement ISO27001/SOC2 controls, lead audits, mentor teams, and reduce risk in a collaborative organization.

I am an information security manager who builds and runs governance, risk, and compliance programs, implementing ISO27001, SOC2, and PCI DSS while overseeing top corporate risks, ISMS documentation, KPI reporting, and external audit coordination. I drive change management, support RFI/RFP security responses, and deliver measurable improvements to GRC processes.

I hold ISMS 27001:2013 Lead Auditor (IRCA) credential and completed a Cyber Security Expert program; my background also includes roles in data analysis and .NET development, which strengthen my technical perspective and problem-solving approach.

Experience

Work history, roles, and key accomplishments

Current

Information Security Manager

Current

Payactiv SDS IT

Nov 2020 - Present (4 years 9 months)

Developed and implemented governance frameworks (ISO27001, SOC2, PCI DSS) and strengthened GRC processes; coordinated external audits, maintained the risk register, and supported RFI/RFP security responses.

ISO 27001 SOC2 PCI DSS GRC Risk Management ISMS RFP

Education

Degrees, certifications, and relevant coursework

Simplilearn

Master's Program (Cyber Security Expert), Cyber Security

2022 - 2023

Completed the Simplilearn Master's Program in Cyber Security (Cyber Security Expert) covering Introduction to Cyber Security, CISSP, Ethical Hacking, and CSSP from July 2022 to July 2023.