Rothesay

Head of Security Engineering

Bank of England

Deputy CISO

Senior Manager

Head of Threat & Vulnerability Management

DevSecOps

Cigital, Inc

Managing Consultant

Senior Security Consultant

Software Security & Testing (IBM Rational)

Software Developer in IBM

🔴 All posts are my observations of the general landscape meant to engage and educate. NOT problems I'm encountering. All views are my own and not that of my employer. I’m a techie, not an economist.

🔴 Please don't invite me to meals, drinks or round tables. ALL requests will be ignored.

I help CIOs in dynamic organisations reduce cyber risk, by developing pragmatic cybersecurity functions that align with the business needs and have a proven track record of increasing simplicity and promoting accountable visibility. 

I'm a Technical Cyber Security Leader with over 17 years of experience within start-ups, management consulting and top-tier organisations. Extensive hands-on experience with Security Architecture, Engineering, DevSecOps, Security Posture Management, Penetration Testing & Red Teaming.

Engagements, Awards, Articles and Education

🔵 InfoSec Europe, Advisory Board • 2024
🔵 e-Crime & Cybersecurity Congress, Lost in Translation • 2024
🔵 Webcast, Control Effectiveness • https://www.brighttalk.com/webcast/19525/609336
🔵 SASIG, Adapting to the new cyber threat landscape • 2023
🔵 Central Banking African Summit, x4 talks over 2 days • 2022
🔵 CyberCon, Hosted fireside chat: BoE, LSEG, MS • 2022
🔵 Secure Southwest, High-value security testing • 2019

🟢 National Cyber Awards, Winner of the Financial Services Award • 2023
🟢 BCS Awards, Finalist for High Impacting Business Project • 2021
🟢 SC Awards Europe, Finalist for Best Security Team Europe • 2019

📒 Preparing your Organisation for AI Cyber Warfare • https://tinyurl.com/df-ai-war
📒 Finding High-Value Security Initiatives • https://tinyurl.com/df-sec-roi
📒 No Bullsh*t Approach To Simplifying Cyber Supply Chain Risk • https://tinyurl.com/df-supplychain
📒 Critical Vulnerability Management Cheat Sheet • https://tinyurl.com/df-cheat

📕 Master of Business Administration (MBA) • Exeter University, 2021
📕 Bachelor of Science (BSc Hons), Computer Systems & Networking • University of Plymouth, 2007
📕 CISM, Certified Information Security Manager • ISACA, 2016
📕 CISSP, Certified Information Security Professional • (ISC)2, 2011
📕 CSSLP, Certified Secure Software Lifecycle Professional • (ISC)2, 2014

Dave F.

Shaukat Khanum Memorial Cancer Hospital and Research Centre

1. Policy review under the ISO 27001:2022 standard and NIST 800-53 framework.
2. Vulnerability Assessment in Nessus.
3. Responsible for handling offenses generated on IBM Qradar (SIEM Solution).
4. Conduct Information Security Awareness Training session for existing employees and new-joiners.

Information Security Officer

Rayn 

1. Policy making in the domain of Information Security
2. Implementing controls from different Standards and Frameworks such as ISO 27001:2022, NIST 800-53, and many more.
3. Awareness training program on Information Security and Cyber Security issues
4. Regularly reviewing different Compliance standards
5. Currently exploring convergence on IT/OT side and enrolled into the IEC 62443 certification on Udemy.

GRC Analyst I

Cyber Security Associate

Project Engineer

Project Associate

Intern

Shenzhen University

It was a joint collaboration research program in between PIEAS, Pakistan and Shenzhen University, China.  I was placed in College of Mechatronics and Control Engineering, Shenzhen University, China. My research work was focused mainly on completing my research work from PIEAS, and also to study and investigate control problem given by supervisor in Shenzhen University, China as well. I learned a lot in this program. Our stay comprised more than 90 days. I learned several tools such as RT Lab and Speedgoat. In my research group, their main focus was on how to extract maximum energy (output power) from wave energy converter. My task was to design such a controller which will be able to harvest maximum energy by keeping physical constraints in consideration. Additionally, suggested how to consider security for the aforementioned control problem.

Research Exchange Student Program

Schlumberger

I worked there as an intern in wireline department. The whole program was comprised of 6 weeks. During which i was able to learn a lot from my manager and corresponding team. I was based in Islamabad, Pakistan. I had an opportunity to see and work on equipment that go into the oil field and some of them were really interested that collects data and then data is feed to computer models to generate an insight.

2+ year experienced individual who has been working in Information Security department as an Information Security Officer at SKMCH&RC. Passionate about all things related to cyber security and actively working on enterprise-level projects to hone skills set.

Zohaib Tahir

taplio

The Battle

Dave F.

Zohaib Tahir

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?