Ihab Azahmad

Information security GRC specialist with 3+ years of experience advising diverse clients on ISO 27001, PCI-DSS, NIST CSF, Cyber Essentials, and SOC 2 programs from gap analysis through certification. Proven expertise in developing governance frameworks, conducting enterprise risk assessments, and managing complex third-party vendor risk lifecycles.

Information Security Risk & Assurance Analyst - CybariK

(2024-04)

• Spearheaded ISO/IEC 27001 implementation by developing comprehensive governance policies, performing control gap analyses, and coordinating remediation efforts across 40+ critical security controls for the organization.
• Contributed to organizational readiness for ISO/IEC 27701 certification as part of a cross-functional team, supporting gap analysis, policy development, and process alignment with GDPR and international privacy requirements to prepare the organization for external audit.
• Executed detailed control gap analyses and security standards reviews, directly contributing to the successful implementation of security improvements across multiple complex and diverse operational business environments.
• Managed the Third-Party Risk Management lifecycle for 30+ vendors by evaluating security questionnaires, SOC 2 reports, and contractual requirements to support informed and secure business decisions, while helping clients complete security questionnaires such as SIG and CAIQ and respond to customer trust programs.
• Facilitated external audits and assessments by gathering evidence and preparing documentation, helping drive each audit cycle to a smooth, successful close.
• Collaborated in identifying security risks across the business, including emerging threats, and supported the team in driving practical, risk-first mitigation strategies.

Cybersecurity Analyst (Internship) - InfoSec4TC

(2023-04 - 2024-02)

• Rewrote and modernised information security policies and standards, closing alignment gaps with industry best practice and giving the business audit-ready documentation ahead of schedule.
• Restructured the security governance documentation library, cutting evidence-retrieval time for internal and external auditors during compliance review cycles.
• Ran risk assessments across systems and business units, surfacing previously untracked risks and giving leadership a live risk register to manage the threat landscape proactively rather than reactively.

AML & Customer Due Diligence - Afro International

(2015-09 - 2023-04)

• Handled sensitive customer data with zero compliance breaches, earning trust from management to take on escalated and higher-risk reviews.
• Cleared CDD and EDD checks in line with AML/BSA regulations, keeping the business fully compliant with no regulatory findings against the accounts reviewed
• Flagged suspicious transaction patterns for escalation, contributing directly to the detection of money laundering, structuring, and fraud attempts before they reached the business

MSc - Network and Information Security - Kingston University London

BSc (Hons) - Business Information Systems - London Metropolitan University