Roman Zaib

Governance, Risk, and Compliance (GRC) and Information Security professional with experience in ISO 27001:2022 implementation, risk assessment, compliance management, security audits, and cybersecurity operations. Skilled in aligning organizational security controls with international frameworks including ISO 27001, NIST, HIPAA, COBIT, and GDPR. Experienced in conducting GAP analyses, developing security policies, managing audit readiness, and improving organizational security posture through effective risk management and compliance initiatives.

GRC Consultant - Fast Nexa (2024-04 – Present)

• Implemented and aligned security controls with ISO 27001:2022 and NIST frameworks.

• Ensured compliance with regulatory standards including HIPAA and NCA.

• Applied COBIT principles for IT governance and risk management.

• Conducted GAP analysis to identify and remediate security control deficiencies.

• Performed security audits and prepared detailed compliance reports.

• Delivered end-to-end cybersecurity and compliance consulting for global clients, including policy reviews, risk assessments, and IT audit preparation.

• Helped organizations align with ISO 27001, NIST CSF, and GDPR frameworks by developing governance controls and documentation.

• Secured applications, APIs, and networks through audits, system hardening, and secure coding consultations.

• Produced compliance-ready reports covering threat modeling, risk analysis, and mitigation plans using tools such as Nmap, Burp Suite, Metasploit, and Wireshark.

• Assisted clients in incident response planning and digital forensics, ensuring compliance with internal and external reporting standards.

• Monitored SIEM (QRadar) and improved threat detection speed (MTTD ↓30%) while reducing false positives by 35%.

• Led incident response and handled ransomware/phishing attacks, strengthening overall security posture.

• Conducted vulnerability assessments & penetration testing, reducing critical security flaws by up to 40%.

• Implemented security controls (firewalls, DLP, IAM) to secure networks and cloud environments.

• Ensured compliance (ISO 27001, NIST) and improved security awareness, cutting phishing click rates by 60%.

BS Cyber Security – Khwaja Fareed University of Engineering And Information Technology (KFUEIT)

(2021-09 – 2025-06)