Udain Fatima

Final-year Cybersecurity undergraduate specializing in Governance, Risk, and Compliance (GRC), with hands-on experience conducting IT risk assessments, building risk registers, and mapping controls against ISO 27001, NIST CSF, and GDPR. Portfolio includes an independent risk assessment case study and accepted research at BSides Berlin 2026. Currently pursuing ISO/IEC 27001 Lead Auditor certification, seeking a GRC Analyst role.

Cybersecurity Analyst at Cantonment Board Malir (2024-10 – 2024-12)

• Assisted in developing Incident Response (IR), Business Continuity Plan (BCP), and Disaster Recovery Plan (DRP) documentation for critical systems and business processes, strengthening organizational resilience.
• Supported security risk assessments by reviewing system logs, identifying potential security risks, and recommending security controls aligned with organizational policies.
• Collaborated with the security team to improve incident response procedures and ensure compliance with cybersecurity best practices.

Cybersecurity Research Intern at National Center for Cyber Security (NCCS) (2024-02 – 2024-06)

• Developed a Network-Based Intrusion Detection System (NIDS) capable of detecting multiple categories of malicious network traffic using machine learning techniques.
• Conducted research on intrusion detection methodologies, network security, and emerging cyber threats, documenting findings in technical reports.
• Evaluated model performance using standard classification metrics to support effective threat detection.

Governance, Risk & Compliance (GRC) Analyst at Freelance / Independent (2025-07 – Present)

• Conducted 5+ security risk assessments using ISO 27005 and the NIST Risk Management Framework (RMF), identifying 40+ security risks and recommending mitigation strategies aligned with ISO/IEC 27001 Annex A controls.
• Developed 15+ security policies, procedures, and governance documents to support audit readiness and compliance with ISO/IEC 27001 requirements.
• Built and maintained risk registers containing 50+ identified risks, assigning likelihood, impact, treatment plans, and residual risk ratings using qualitative risk assessment methodologies.
• Performed a comprehensive governance and compliance assessment of GitLab Enterprise, mapping 60+ security controls against ISO/IEC 27001, NIST CSF, SOC 2, and GDPR, producing a detailed risk assessment report with prioritized remediation recommendations.

Bachelor of Science in Cyber Security – Air University, Islamabad (E-8 Campus) (2023-2027)