Hire the Best Certified Information Systems Security Professional (CISSP)
in India

Profile Summary Seasoned Information Security Professional with 22+ years of experience across, Application Security, VAPT, Cloud Security, Email Security and Risk Governance. I specialize in designing secure, compliant and automated environments that protect enterprise assets from the code level to the cloud. From hardening AI infrastructure to mastering email deliverability, I ensure every layer of the digital stack is resilient. Offensive Security: VAPT, Red Teaming, and OWASP Top 10 mitigation. Infrastructure: Expert-level Linux/Windows migration and AI model pipeline security. Governance: Certified (CISSP, CISA, CISM, CRISC, CGEIT) leader in ISO 27001, PCI DSS, and NIST frameworks. Network Security Architecture: Design and implementation of firewalls (NGFW), IPS/IDS, VPNs, VLAN segmentation, and zero-trust models for enterprise and data center environments. Expertise in deep-packet inspection, application-layer filtering, and threat intelligence integration to detect, prevent, and respond to advanced threats. MFA, SSO, JML workflows, passwordless authentication, IDOR, privilege escalation and governance-driven IAM programmes Code security, data protection, and vulnerability management standards Threat modeling and risk rating using STRIDE/DREAD or CVSS SonicWall TZ 500, 600, SOHOW Plesk & WHM Panel expert, Tomcat, Apache, Ngnix & IIS Database Security hardening MySQL, Mariadb, MSSQL & Oracle HTTP Security Header, Server Side include, XXE, XSLT, CSRF. PKI, SSL TLS 1.2 &1.3 http 1.1, http2, http3 Network Security IPv6/IPv4, ZTNA CrowdStrike/ Sentinel/ Trend Micro Endpoint Security, Microsoft Purview & Symantec DLP Solution SIEM - QRadar, DNIF Google Chronicle & Mandiant SOAR Regular risk assessments and control validation AppSec risk register maintenance Shift Everywhere Security SAST, DAST, IAST, RAP, and SCA tools (Nessus, Qualys Guard, SonarQube, Fortify, Checkmarx, Veracode, Burp Suite, OWASP ZAP, MobSF, Postman) Image vulnerability scanning (Trivy, Clair) DNS Security Kubernetes/Docker configuration hardening Runtime protection for containers Mode Security , Cloudflare WAF Threat Modeling & Attack Surface Reduction MFA, SSO, JML workflows, password less authentication, and governance-driven IAM programmes Security Automation & Infrastructure as Code (IaC) Compliance & Risk Governance (ISO 27002, SOC 2, HIPAA, PCI DSS) Security Operations ( IAM, EDR/MDR SIEM/SOAR, Incident Response) Application, Database & Systems Security Wordpress/Magento/Drupal Security Hardening Cloud-Native & Container Security Cloud Security & AI Platform Expertise Implemented CASB, CSPM, CWPP & CNAPP Amazon Web Services (AWS): Secured workloads leveraging EC2, S3, IAM, VPC, CloudFront, RDS, and Route 53 with enterprise controls. Deployed AWS WAF & Shield, GuardDuty, Inspector, Security Hub, and Audit Manager for compliance automation. Container Security - AWS ECS, EKS, ECR, Fargate Integrated Amazon Bedrock Microsoft Azure: Extensive experience with Azure OpenAI, AI Studio, Azure ML, Sentinel, RDP, VPN, Intune Defender for Cloud, and Purview. Deployed Confidential Computing, Data Lake, Cosmos DB, and AKS using secure-by-design principles, encryption-at-rest, and real-time compliance monitoring. Google Cloud Platform (GCP): Implemented Sensitive Data Protection, IAM, VPC, SCC, Confidential Computing, Cloud Armor, and KMS for resilient data governance. Applied AI/ML security frameworks (SAIF, Model Armor, Guardrails) to safeguard sensitive workloads and mitigate model-level risks. Email Security SPF, DKIM, DMARC, BIMI, RBL, Blocklist check , Microsoft Exchange/ O365/Google Workspace/Power MTA, Qmail, Postfix, Smartermail etc, Email phishing Simulation & campaign AI Infrastructure Security N8N and OpenClaw AI workflow configuration. My work includes protecting data pipelines, securing model training and deployment environments, enforcing IAM controls, and hardening GPU/compute clusters. I assess risks in model storage, APIs, and inference endpoints, implement monitoring for data integrity and model misuse, and ensure compliance with security and governance frameworks. I provide actionable recommendations to strengthen resilience, privacy, and the overall security posture of AI systems. Security Audit, Risk Assessment and Audit Compliance, with a strong track record in securing enterprise systems, networks, applications and multi-cloud environments. My professional journey includes leading ISO 27002, ISO42001, HIPAA, PCI DSS, SOX, ITGC, CIS, NIST, NIS2, GDPR, CCPA, HIPPA and SOC 2 audits, implementing GRC frameworks, and ensuring regulatory alignment and risk mitigation across complex organizations. BCP/DR, RPO, RTO, MTTD, MTTR Business Impact Assessment and Privacy Impact assessment GRC Tools - Security Score Card, BitSite, Auditboard, OneTrust, RSA Archer, ServiceNow GRC, Drata & Vanta

TOP-Rated Plus Upwork Member. (Top 3%) We are a Cyber Security Consulting firm operated by former government and Fortune 500 hackers. Our team has been inside networks big and small, from electrical grids to water facilities. No network is too complex for us. We have expertise helping and securing SaaS organizations. Our Services: - Penetration Testing: - ISO27001 - SOC2 - GDPR - HIPAA - Phishing Engagements - External Assessments Why Choose Us? Unmatched Expertise: Our team comprises international banks, SaaS applications and Fortune 500 clients who bring unparalleled skills and insights to every project. With hands-on experience in securing some of the most complex networks in the world, we possess a deep understanding of the cyber threat landscape and the tactics used by attackers. Results-Focused: We are dedicated to delivering actionable results. Our assessments and tests are designed to provide you with clear, practical recommendations that can be implemented to enhance your security posture. Our focus is on ensuring that your network is not only secure but also resilient against evolving threats. Our Certifications: Our team holds industry-leading certifications that validate our expertise and commitment to excellence: CEH: Certified Ethical Hacking CRTO (Certified Red Team Operator): Demonstrates our proficiency in performing advanced red team operations to identify and exploit vulnerabilities. CRTL (Certified Red Team Leader): Reflects our ability to lead and manage complex red team engagements with custom and secure infrastructure. Not even EDR will inhibit our performance so that way we can provide even greater impact. OSCP (Offensive Security Certified Professional): Highlights our skill in conducting thorough penetration tests and developing creative solutions to security challenges. At Ownux Global, we cater to enterprise but also to the startups, web application developers, offering a professional yet relaxed approach to cyber security. Our mission is to safeguard your digital assets with the highest level of expertise and dedication, providing you with peace of mind in an increasingly digital world. Ready to secure your network? Let’s get started. Contact us today to discuss how we can help protect your business from cyber threats.

TOP RATED Freelancer | 10+ Years of Experience | Your Trusted Compliance Partner 75+ clients served all with 5 * ratings They call me "Mr. Compliance"—and for good reason. While you focus on growing your business, I take care of everything compliance-related, ensuring you meet industry standards and win more deals with confidence. Whether it's SOC 2, ISO 27001, HIPAA, PCI DSS, CMMC, or FedRAMP, I make compliance effortless so you can unlock new opportunities without the hassle. Why Clients Trust Me: - Seamless Compliance: I simplify audits, security assessments, and certifications—no stress, no delays. - Growth-Driven Compliance: Compliance isn’t just a checkbox; it’s a competitive advantage. I help shorten sales cycles by getting you audit-ready fast. - End-to-End Support: From policies to risk assessments, vendor due diligence, and security questionnaires—I handle it all. - vCISO Services: Need expert guidance but not ready for a full-time CISO? I offer affordable virtual CISO (vCISO) solutions tailored to your business. - Security Strategy & TPRM: Managing third-party risks? Struggling with cloud or endpoint security? I’ve got you covered. - Maximizing Compliance Tools: Already using Vanta, Drata, Hyperproof, or Scrut but unsure what’s next? Let’s optimize your investment. Proactive, not reactive. I don’t just tick boxes—I future-proof your security and compliance programs. ** Tools & Frameworks: 🔹 Tools Expertise: JIRA, Vanta, Hyperproof, Drata, ServiceNow, AWS, Confluence, Archer, Scrut Automation 🔹 Compliance Frameworks: ISO 27001, SOC 2, FedRAMP, NIST, HIPAA, PCI-DSS, CMMC, TPRM, and more 📢 Ready to Make Compliance Work for You? Click "Invite" to connect, and let's build a stronger, more secure, and audit-ready business together. ⚠️ Note: If you're not fully committed to compliance or tend to be unresponsive, I may not be the right fit. I prioritize working with businesses serious about security and compliance success.

Microsoft Azure/365 Platform Consultant has more than 24 years of serving customers using Microsoft technologies including Azure Infra and Security, Defender for Cloud, AD Assessment, Sentinel, Purview, Compliance, MS365, AWS, Google. Assisting for CMMC, HIPAA and NIST; Microsoft Certifications: ✔ Microsoft Certified: Azure Solutions Architect Expert ✔ Microsoft Certified: Identity and Access Administrator Associate ✔ Microsoft Certified: Azure Security Engineer Associate ✔ Microsoft Certified: Cybersecurity Architect Expert ✔ Microsoft Certified: Information Protection and Compliance Administrator Associate ✔ Microsoft Certified: Security Operations Analyst Associate ✔ Microsoft 365 Certified: Administrator Expert ✔ Microsoft Certified: Azure for SAP Workloads Specialty Other Certifications and Trainings: ✔ Certified Information Systems Security Professional (CISSP) – ISC2 ✔ Certified in Cyber Security (CC) – ISC2 ✔ ISO/IEC 22301:2019 Business Continuity Lead Auditor ✔ ISO/IEC 27001:2022 Information Security Lead Auditor ✔ ISO/IEC 27701:2019 Privacy Information Lead Auditor ✔ Trained in “Certified Information Security Manager” (CISM) ✔ Trained in “Certified Information Systems Auditor” (CISA) Azure Cloud Security Skills: • Microsoft Azure Security Services • M365 Environment Security • Microsoft Defender Suite (Cloud, Identity, Office 365) • Microsoft 365 Copilot Enablement • Cloud Adoption and Migration • Identity and Access Management (IAM) • Cloud Security Posture Management (CSPM) • Security Information and Event Management (SIEM) • Cloud Access Security Broker (CASB) • VPN, Segmentation, WAF, Access Control • Encryption Technologies • SOAR Concepts and Toolsets • Microsoft 365 Copilot Enablement & Prompt Engineering • Microsoft Copilot Studio (Custom Agent & Workflow Design) • Microsoft Purview & Copilot Data Governance Core Competencies: • Threat and Vulnerability Management • Penetration Testing & Red Teaming • System Hardening & Compliance • Application and API Security • Third-Party Risk Management • Team Leadership & Mentorship • Security Frameworks (NIST, ISO 27001, OWASP) • Cloud and Container Security (AWS, Azure, Kubernetes) • DevSecOps Integration • Persona-Based AI Training & Instructional Design • AI Adoption Roadmaps & Change Management • Cross-Functional Business Process Mapping (Legal, Finance, Operations) Thank you for your time and consideration. Yours truly, Manmeet Singh

I am an accomplished risk management professional with extensive experience managing Third Party risk management (TPRM) from onboarding to offboarding of all vendors, Vendor risk management covering Cyber Security, Data Privacy and Information security, Risk management, Risk assessment, Designing TPRM framework, Third Party, Risk Assurance, Contract Review/Due Diligence, Procurement Governance/Assurance Review, Project Management, Stakeholder management, My expertise spans across designing and implementing comprehensive TPRM frameworks, overseeing risk assessments, and managing vendor-related activities. Core Competencies: a) Third-Party Risk Management (TPRM): I lead and oversee the entire risk assessment and due diligence process for third-party vendors. This includes managing the onboarding processes and checklists to ensure thorough risk evaluations. I design and implement detailed TPRM project plans, outlining tasks, timelines, and milestones to ensure effective risk management. b) Vendor and Contract Management: My role involves handling contract management processes for hardware and software, including new contracts, amendments, and renewals. I coordinate with external vendors, internal stakeholders, and legal teams to ensure timely contract execution and issue resolution. c) Stakeholder Engagement: I engage with key stakeholders from various departments and external vendors to ensure smooth communication and collaboration throughout the risk management process. I manage expectations and provide direction on risk assessments and non-compliance issues. d) Risk Assessment and Audits: I conduct comprehensive risk assessments and audits focusing on people, processes, and technology. My work includes identifying gaps, risks, and opportunities for improvement, and providing recommendations for enhancing policies and standards. e) Reporting and Process Improvement: I create regular reports on the status of third-party assessments, highlighting roadblocks and key issues to management and stakeholders. I have successfully implemented process improvements, such as transitioning quarterly scorecard activities from manual processes to Google Forms to minimize errors and enhance efficiency. f) Team Leadership and Development: I lead and develop teams of TPRM specialists and consultants, providing knowledge sharing, training, and motivation. I manage projects, stakeholder presentations, and client relationships to drive successful outcomes.

I am an 7 experienced Cyber Security Specialist with a strong focus on protecting digital assets, securing networks, and identifying vulnerabilities before attackers do. I help businesses safeguard their systems, applications, and data against cyber threats while ensuring compliance with industry security standards. With hands-on experience across network security, application security, and cloud environments, I deliver practical and scalable security solutions tailored to business needs. ✅ What I Can Help You With 🔹 Vulnerability Assessment & Penetration Testing (VAPT): ============================================== Web & network vulnerability assessments Manual and automated penetration testing OWASP Top 10 security issues remediation 🔹 Network & Infrastructure Security: ============================== Firewall configuration & hardening IDS/IPS setup and monitoring Secure network architecture design 🔹 Web Application Security: ======================== Website & API security testing Secure authentication & access control Fixing SQL Injection, XSS, CSRF, and other vulnerabilities 🔹 Cloud & DevSecOps Security: ========================== AWS, Azure, GCP security best practices Cloud misconfiguration audits Secure CI/CD pipelines 🔹 Security Compliance & Risk Management: ==================================== ISO 27001, SOC 2, HIPAA, PCI DSS guidance Risk assessment and security gap analysis Security policies, SOPs, and documentation 🛠 Tools & Technologies: ==================== Burp Suite, Metasploit, Nessus, Nmap, Wireshark SIEM & log analysis Linux, Windows Security OWASP ZAP, Kali Linux Cloud security tools (AWS Security Hub, Azure Security Center) 💡 Why Clients Choose Me: ======================= ✔ Clear and actionable security reports ✔ Strong communication & quick response time ✔ Focus on real-world, business-friendly security solutions ✔ 100% confidentiality and ethical standards 🎯 How I Work : -------------------- 1.Understand your system, business, and risk level 2.Perform thorough security testing and analysis 3.Provide a detailed vulnerability report with fixes 4.Support remediation and re-testing If you’re looking for a reliable Cyber Security expert who takes security seriously and delivers real value let’s connect. 📩 Message me to discuss your project and secure your business today.