a
awanikhwan

Awan Ikhwan

@awanikhwan

Cloud Policy Governance Lead

Indonésia
Inglês, Indonésio
Algumas informações são exibidas no idioma inglês.
Sobre mim
I am a results-driven Information Security Governance and Cloud Policy professional with over 13 years of experience in cybersecurity, GRC, and corporate strategy. I currently lead cloud policy and governance at Telkomsigma, where I architect frameworks aligned with ISO 27001, 27017, and 27018. I have a proven track record of delivering zero-finding audits and managing complex MSSP governance for national government initiatives.... Saiba mais

Habilidades

a
awanikhwan
Awan Ikhwan
offline • 
Tempo médio de resposta: 1 hora

Conheça meus serviços

Governança e proteção de dados
I will craft cyber security policies to help you pass iso 27001 audits
A partir deUS$ 40 /projetoMais detalhes

Experiência profissional

Telkom_Indonesia

IT GRC Cloud and Cybersecurity

Telkom Indonesia • Período integral

Sep 2022 - Present • 4 yrs 1 mo

Job Description: 1. Architected and managed IT GRC and cloud security frameworks aligned with ISO/IEC 27001, ISO/IEC 27017, and ISO/IEC 27018 for private and public cloud environments. 2. Governed the Security Shared Responsibility Matrix using the CSA Cloud Control Matrix (CCM) v4.0 to ensure comprehensive cloud compliance. 3. Conducted governance-level reviews of technical security controls, including SIEM, NGFW, WAF, VAPT, and user access reviews (UAR). 4. Coordinated internal and external ISMS audit activities and maintained full certification-readiness documentation. Key Achievements: 1. Authored and maintained 40+ governance documents (policies, standards, procedures), consistently achieving zero audit findings across all ISMS audits. 2. Led the Managed Security Service Provider (MSSP) cybersecurity governance for a national government agency (Badan Gizi Nasional) under Indonesia's SPBE initiative. 3. Successfully delivered 60+ critical governance artifacts within the SIPGN scope, ensuring full alignment with government regulations and industry best practices.