Muhammad Rehan

Cybersecurity Auditor

Angular Quantum • Período integral

Apr 2024 - Apr 2025 • 1 yr

• Spearheaded SOC2 audit processes across over 150 third-party organizations, leading to an 80% improvement in cybersecurity compliance ratings. • Played a key role in enhancing the company’s cybersecurity posture by developing new cybersecurity policies and procedures, aligning them with the latest industry standards and regulatory requirements. • Conducted comprehensive risk and gap assessments, collaborating with IT and management teams to prioritize remediation efforts, leading to reduction in identified risks. • Performed thorough reviews of audit evidence to ensure compliance with established standards and identify areas for improvement. • Provided mentorship to junior auditors, helping them develop skills in audit methodologies and compliance frameworks. • Utilizing compliance automation tools such as Vanta, Drata, Secureframe, Sprinto, and OneTrust to streamline and enhance the SOC2 audit process, ensuring efficient and accurate compliance tracking and reporting.

GRC Analyst

Graxo Consulting • Período integral

Mar 2023 - Mar 2024 • 1 yr

• Led the development of a comprehensive Information Security Management System (ISMS) based on ISO 27001, and SAMA CSF frameworks, significantly improving the organization’s security maturity and readiness for certification. • Conducted in-depth gap analyses and compliance audits, identifying key areas of improvement and implementing actionable remediation plans that reduced audit findings by 60%. • Collaborated with senior management to align information security policies with business objectives, resulting in enhanced support and resource allocation for cybersecurity initiatives. • Trained and educated staff on cybersecurity best practices and compliance requirements, leading to a 45% increase in employee cybersecurity awareness and engagement.