11/09/2026 updated
100 % available
Leader in Enterprise Security, Secure Digital Transformation & OT/ICS Cybersecurity
Karachi, Pakistan
Worldwide
Master of Science in Information Security (MS-IS)ServiceNow Security OperationsNetcracker Digital OSSCertified Information Systems Security ProfessionalCertified Information Security ManagerCloud Computing SecurityComputer SecurityInformation Leak PreventionData SecurityData Transformation ServicesInformation Security ManagementInternet Protocol Security (IP SEC)Internet SecurityIndustry Standard ArchitectureInformation Systems Security Engineering ProfessionalNetwork Security
OT/ICS Cybersecurity
Expertise in OT/ICS preventive cybersecurity across industrial environments, including IEC 62443-aligned defense-in-depth architecture, Purdue zones, industrial DMZs, data diodes, secure remote access, USB sanitization, OT monitoring with Nozomi, OPSWAT security gateways, and integration of cybersecurity into OT/IIoT digital-transformation lifecycles.
IT Preventive Security
Comprehensive knowledge in enterprise IT preventive security covering secure architecture, CIS hardening, network segmentation, Zero Trust Network Access, Identity and Access Management, Privileged Access Management, MFA, EDR/XDR, MDM, NAC/ISE, vulnerability remediation, patch management, endpoint protection, and cloud security across AWS and Microsoft Azure.
Information Security Governance, Risk & Compliance
Strong background in information security governance, risk management and compliance, including IT/OT risk registers, audit remediation, policy framework development, regulatory compliance, SIEM/SOC workflows, incident analysis, business continuity planning, and frameworks such as NIST-RMF, ISO 27001, PCAA, IATT, ICAO, and HIPAA.
Cloud & Application Security
experience with cloud and application security on AWS and Microsoft Azure, including DevSecOps, Kubernetes, containers, API security, AI SEC, and embedding security controls into application development and digital transformation project lifecycles.
Network Infrastructure & Resilience
Proven track record in designing and managing core LAN, WAN, B2B, SD-WAN, VPN, and wireless network infrastructures, including data center operations, disaster recovery, BCP, RPO/RTO planning, and 24x7 availability for mission-critical services.
Vulnerability Management & Remediation
Experience managing vulnerability remediation programs using tools such as Qualys, CrowdStrike EDR, Trend Micro XDR, Manage Engine, and coordinating remediation across technology owners, vendors, and business stakeholders through closure.
Identity & Access Management
Skilled in implementing IAM, PAM with CyberArk, MFA, access reviews, least privilege principles, and secure remote access solutions across enterprise IT and OT environments.
Digital Transformation & IT/OT Convergence
Leadership in digital transformation initiatives including IT/OT convergence, IIoT, SAP integration, technology roadmaps, RFPs, and CAPEX/OPEX decision alignment with business continuity and operational priorities.
Certifications & Frameworks
CISM, ITIL 4, Fortinet NSE 1 & 2, CCNP, CCIP, CCVP, MCTS, CWNA, CCNA, ISA/IEC 62443 IC-32, ISA/IEC 62443 IC33M, and exida IEC 62443 OT Cybersecurity Practitioner, with training in CISSP, ISO/IEC 27001, CEH, PMP, and more.
SIEM & Incident Response
Experience enabling IBM QRadar SIEM, centralized syslog collection, incident-response playbooks, security monitoring, event correlation and investigation, as well as SOC/SIEM use cases, alert escalation, and VAPT findings management.
Experience
Professional experience10+ years
Freelancer since2018
Languages
EnglishNative speaker
Project history
Strengthened cyber resilience of Engro plant facilities by designing and maintaining OT-IT security controls, improving system protection, risk management, and regulatory compliance. Executed FMEA and FAT for OT systems, led preventive OT/ICS cybersecurity across industrial and AI-enabled environments, designed IEC 62443-aligned defense-in-depth architecture, embedded cybersecurity into OT/IIoT digital-transformation lifecycles, and delivered IEC 62443-aligned OT safeguards using data diodes, OPSWAT security gateways, Nozomi monitoring, USB kiosks, and industrial network segmentation.
Led the preventive-security function across enterprise IT, cloud, applications and OT. Established joint workflows with Information Security for detective monitoring, SOC/SIEM use cases, alert escalation, and incident analysis. Developed IT/OT risk registers with PWC, implemented cyber security roadmap covering secure architecture, CIS hardening, IAM, PAM, MFA, EDR/XDR, allowlisting, MDM, NAC, Zero Trust Network Access, and embedded DevSecOps controls into application development and cloud project lifecycles.
Directed IT strategy, security planning, infrastructure continuity and disaster-recovery priorities for nationwide and international airline operations. Executed infrastructure upgrade from CISCO to HUAWEI, supported IT SOC POC implementation, maintained enterprise continuity requirements through backup, DR, BCP and RPO/RTO planning, and developed business cases, technical RFPs and solution roadmaps.