Open to opportunities

Nurhannan Khairi

@nurhannankhairi

Message

IT Security Officer with expertise in vulnerability management and compliance.

Malaysia

Message

What I'm looking for

I seek a role that fosters growth, emphasizes security innovation, and values collaboration.

I am an IT Security Officer with a strong background in information security operations, governance, risk management, and compliance. Currently, I work at Malaysian Rating Corporation Berhad, where I proactively identify and mitigate security threats, ensuring the integrity of our IT systems. My role involves not only responding to vulnerabilities but also enhancing our security posture through comprehensive risk assessments and strategic planning.

Previously, I served as a Senior Security Analyst at Worldline International, where I led initiatives for vulnerability management and compliance with ISO 27001 and PCI DSS standards. I have a proven track record of developing security policies, conducting audits, and fostering a culture of security awareness within organizations. My experience spans various sectors, allowing me to adapt and implement best practices tailored to specific business needs.

Experience

Work history, roles, and key accomplishments

Current

IT Security Officer

Current

Malaysian Rating Corporation Berhad

Sep 2023 - Present (1 year 9 months)

As an IT Security Officer, I manage vulnerability assessments, respond to security threats, and ensure compliance with IT policies. I lead initiatives to enhance security awareness and oversee risk management processes.

Vulnerability Management Qualys Nessus ISO 27001 PCI DSS Risk Management Security Awareness Security Policies Compliance

Senior Security Analyst

Worldline International SDN. BHD.

Sep 2019 - Sep 2023 (4 years)

In this role, I focused on security operations, vulnerability management, and compliance audits. I conducted risk assessments and managed security incidents while ensuring adherence to ISO 27001 and PCI DSS standards.

Security Operations Nessus Qualys ISO 27001 PCI DSS Risk Assessment Security Auditing Vulnerability Assessment

Information Security Analyst

YTL Communications SDN. BHD.

Nov 2018 - Oct 2019 (11 months)

Managed information security operations, conducted risk assessments, and developed security training programs. I also created a Cyber Security Playbook and participated in change management processes.

Information Security Risk Assessment Nessus Acunetix Change Management

Mobile Application Developer/Software Analyst

YTL Communications SDN. BHD.

Nov 2017 - Dec 2018 (1 year 1 month)

Developed and tested mobile applications, focusing on integrating face recognition APIs and centralizing DevOps tools for improved project management and reporting.

DevOps Jira Jenkins Prototyping

Graduate Trainee

Nexperts Academy SDN. BHD.

Aug 2017 - Sep 2017 (1 month)

Participated in a graduate enhancement program focusing on unified communications, gaining hands-on experience with various IT concepts and tools.

IT concepts Unified Communications MCSA CCNA Hands On Training Networking

Internship Trainee

Sigma Rectrix Systems (M) SDN. BHD.

Feb 2017 - Jun 2017 (4 months)

Provided first-level technical support, troubleshooting operating systems, and assisting with maintenance tasks while preparing documentation for technical processes.

Technical Support Troubleshooting Technical Documentation Operating System

Education

Degrees, certifications, and relevant coursework

Universiti Sains Islam Malaysia

Bachelor of Science with Honours, Computer Science

2013 - 2017

Completed a Bachelor of Science with Honours in Information Security and Assurance, focusing on the principles of information security, risk management, and assurance practices.