Shahida Farooq

Experienced Cybersecurity Analyst specializing in ISO 27001 and PCI DSS compliance, with expertise in risk assessment, vulnerability management, and incident response. Focused on enhancing security posture and protecting critical assets through continuous improvement of information security practices.

Cyber Security Analyst

• Conduct comprehensive security assessments and penetration testing based on industry frameworks such as ISO 27001, PCI DSS, and NIST 800-82 to identify and address security risks
• Design, deploy, and manage Security Information and Event Management (SIEM) solutions to enhance threat detection, monitoring, and incident response capabilities
• Develop, implement, and enforce security policies, standards, and procedures to ensure compliance with regulatory requirements like ISO 27001 and PCI DSS, including conducting regular audits and risk assessments
• Apply security best practices to protect cloud infrastructure on platforms like AWS, including encryption, access control, and monitoring to ensure data protection
• Automate security processes, compliance checks, and incident response workflows using tools such as Ansible, Puppet, and Chef, integrating security controls into CI/CD pipelines
• Lead incident response activities, perform root cause analysis, and implement countermeasures to swiftly address and resolve security incidents
• Implement tailored security measures for SCADA/ICS systems, ensuring compliance with relevant standards like ISO 27019:2017 to secure critical infrastructure
• Develop and deliver security awareness programs to educate employees on best practices, fostering a security-first culture within the organization
• Implement monitoring and logging solutions to track security metrics, produce regular reports, and provide actionable insights into the organization's security posture
• Work closely with development, operations, and compliance teams to integrate security into all stages of the development lifecycle, ensuring adherence to security requirements and best practices

Diploma - Cloud Cyber Security - Al Nafi - Canada