Ishraq Jan

GRC and cybersecurity compliance professional with hands-on experience applying the Saudi NCA Essential Cybersecurity Controls (ECC-2:2024) framework to a Critical National Infrastructure organization. Skilled in control gap assessments, policy development, compliance evidence tracking, and building internal GRC tooling, with working exposure to OT/SCADA environments. Brings a software development foundation in front-end technologies and Python that supports a practical, tool-building approach to compliance work.

Compliance Analyst - GRC Copilot

(2024-01)

Leading NCA ECC-2:2024 compliance implementation for Ishraq Water Supply Company (ISWC), a medium-sized Critical National Infrastructure water utility in Saudi Arabia.

• Built an in-house GRC tool and produced a full 108-control gap assessment against the ECC-2:2024 framework.
• Authored individual PDF evidence documents for every ECC control and developed a compliance evidence tracker.
• Wrote comprehensive cybersecurity policy documents tailored to a water utility with SCADA/OT infrastructure (Siemens WinCC, Fortinet, Microsoft 365, SAP ERP).
• Identified and prioritized key compliance gaps, including network segmentation, SIEM, incident response, vulnerability management, and formal cybersecurity governance.
• Translated the full ECC-2:2024 document into Roman Urdu across Word, HTML, and Markdown formats to support local stakeholder understanding.

BS - Software Engineering - University of Malakand (2019 - 2023)

HSSC - Pre-Engineering - The Quaid-e-Azam College (2017 - 2019)

SSC - Science - London Model School (2015 - 2017)