Sonya Azeem
@sonyaazeem
GRC Analyst at RedSecLab assessing PCI DSS compliance for financial institutions, including Allied Bank and Habib Metro.
PakistanWhat I'm looking for
At RedSecLab, I assess CDE scope for financial institutions, including Allied Bank and Habib Metro. I conduct PCI DSS gap assessments through walkthroughs, stakeholder interviews, document reviews, and evidence validation.
At Habib Bank AG Zurich (HBZ Group), I monitored compliance with organizational policies and standards, including ISO 27001, PCI DSS, SWIFT, FINMA, NESA, and HKMA. I also managed the GRC analyst tool Eramba and performed third-party application and infrastructure risk assessments.
At Adamjee Life Assurance, I worked on vulnerability scanning using Nessus and SIEM configuration. I also successfully integrated Wazuh with Mailcow and implemented advanced XDR capabilities into an EDR solution.
Experience
Work history, roles, and key accomplishments
Assistant Manager – GRC
RedSecLab
Aug 2026 - Present (2 months)
Assess CDE scope for financial institutions, including Allied Bank and Habib Metro. Conduct PCI DSS gap assessments and identify control gaps and remediation actions.
Information Security Officer OG1 (GRC Analyst)
Habib Bank AG Zurich (HBZ Group)
Jul 2022 - Jul 2026 (4 years)
Monitored compliance with organizational policies and international standards including ISO 27001, PCI DSS, SWIFT, FINMA, NESA, and HKMA. Managed the GRC analyst tool Eramba and performed risk assessments.
Associate IS Officer
Adamjee Life Assurance
Apr 2022 - Jul 2022 (3 months)
Worked on vulnerability scanning using Nessus and SIEM configuration.
Lab Engineer
Bahria University, Karachi Campus
Mar 2021 - Mar 2022 (1 year)
Served as Lab Engineer at Bahria University, Karachi Campus.
Education
Degrees, certifications, and relevant coursework
National University of Sciences & Technology (NUST)
Master of Science, Cyber Security
2020 - 2023
Grade: 3.63
Pursued a Master of Science in Cyber Security with a CGPA of 3.63, covering information security management, advanced cryptography, network security, ethical hacking, computer forensics, and IT evaluation and auditing.
NED University of Engineering & Technology
Bachelor of Engineering, Telecommunication Engineering
2015 - 2018
Grade: 3.596
Earned a Bachelor of Engineering in Telecommunication Engineering with a CGPA of 3.596, including coursework in telecommunication networking, switching systems, optical fiber communication, digital communications, and information theory.
PECB
ISO/IEC 27001 Implementer, Information Security
Completed the ISO/IEC 27001 Implementer certification in February 2025.
ISC2
Certified in Cybersecurity (CC), Cybersecurity
Earned the Certified in Cybersecurity (CC) certification in April 2023.
EC-Council
CHFI – Computer Hacking Forensic Investigator, Computer Hacking Forensic Investigation
Completed a 5-day CHFI training by Metapi, supported by EC-Council, issued on 17 April 2022.
International Cyber Security Institute (ICSI)
Certified Network Security Specialist (CNSS), Network Security
Completed the Certified Network Security Specialist (CNSS) certification online during the COVID-19 pandemic.
Cyber Security Foundation Professional Certificate (CSFPC)
Cyber Security Foundation Professional Certificate (CSFPC), Cybersecurity
Earned the Cyber Security Foundation Professional Certificate (CSFPC).
Availability
Location
PakistanAuthorized to work in
Salary expectations
Job categories
Interested in hiring Sonya?
You can contact Sonya and 90k+ other talented remote workers on Himalayas.
Message SonyaGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
