Reading articles or watching movies/videos on real case-based cyber incidents encountered, focusing on root cause and impact


Information Security Risk and Compliance professional transitioning from 8+ years of experience in digital analytics and technology operations. ISMS Practitioner with strong understanding of ISO/IEC 27001, risk assessment, control mapping, and compliance documentation. Adept at data analysis, audit support, and security governance.
. Provisioning and managing EC2 instances
. Creating and securing S3 buckets with appropriate permission controls
. Managing IAM users, groups, roles, and policies following least-privilege principles
. Supporting DNS migration from GoDaddy to AWS, ensuring service continuity and configuration accuracy
(Risk, Process & Governance Oriented)
(Security-Aware & Data-Driven Profile)
(Operations, Quality & Control Focus)
ISO/IEC 27001 ISMS Implementation
Information Security Risk Assessment
Control Mapping & Gap Analysis
Cloud Security Fundamentals (AWS)
ISO/IEC 27001 ISMS Concepts & Annex A Controls
Governance, Risk & Compliance (GRC) Fundamentals
IAM (Users, Roles, Policies)
Vulnerability Awareness & Threat Analysis
HTML, Java, Python - Fundamentals
Communication & Documentation
Google Analytics
ISMS Practitioner (ISO/IEC 27001:2022), Jun-Aug 2025
Reading articles or watching movies/videos on real case-based cyber incidents encountered, focusing on root cause and impact
Blue Team defensive strategies and incident response
Security control understanding and documentation
To transition into Information Security Risk & Compliance or Blue Team roles, leveraging analytical experience, cloud knowledge, and ISMS understanding to support secure, compliant, and resilient organizational environments.