Hire the Best Information Security Analysts
in Saudi Arabia

✔️CISSP ✔️ Certified Information System Auditor (CISA) ✔️ SOC 2 ✔️ NIST , COBIT, ITIL, NCA ECC, SADAIA and SAMA so your organization meets both international best practices and local regulatory mandates. ✔️ ISO 27001 Lead Auditor & Implementer ✔️ ISO 42001 Lead Implementer ✔️ ISO 22301 ✔️Comptia Security + ✔️ Cyber Threat Management ✔️ ISO 27701 Lead Auditor and Implementer I help organizations build strong, practical cybersecurity and governance programs that protect digital assets, meet regulatory requirements, and support business growth — without unnecessary complexity or cost. With a strong foundation in cybersecurity governance, risk management, and compliance, I specialize in translating security requirements into real-world, implementable solutions that actually work for teams and auditors alike. Rather than just writing policies, I focus on execution — aligning security controls with business objectives so organizations can operate securely, pass audits confidently, and scale with trust. 🛡️ Core Areas of Expertise ✔️Security Frameworks & Compliance: • ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS • NIST & ISO-aligned security frameworks • Audit preparation, gap assessments, and remediation planning ✔️Governance, Risk & Compliance (GRC) • Cybersecurity risk assessments & treatment plans • Enterprise risk management support • Policy, standard, and procedure development • KPI & performance metrics for security programs ✔️Incident Response & Resilience • Incident Response Plans (IRP) • Business Continuity & Disaster Recovery (BCP/DRP) • Tabletop exercises & readiness testing ✔️Cloud & Technical Security • AWS, Azure, and hybrid cloud security assessments • Secure system and network architecture reviews • Defense-in-depth and security best practices ✔️Team Enablement • Building and mentoring cybersecurity teams • Improving operational maturity and accountability ✔️AI & Emerging Technology Risk • AI governance support and risk assessments • Secure adoption of AI systems within compliance boundaries 💡 How I Work What sets me apart is practical implementation. I don’t deliver theoretical frameworks — I deliver actionable security programs that organizations can actually run, maintain, and improve. My work has helped organizations: • Pass regulatory and certification audits • Strengthen cybersecurity posture • Establish governance from scratch • Deploy new technologies securely • Build trust with clients, partners, and regulators 📜 Credentials (Value-Driven, Not Credential-Driven) That said, my success is measured by your outcomes, not just certifications. 🚀 Let’s Work Together Whether you need: •Cybersecurity GRC implementation •Risk assessments & compliance readiness •Policy & procedure development •Incident response & resilience planning •Secure AI and cloud adoption support I deliver enterprise-quality results tailored to your business size, industry, and budget. ✔️ TOP RATED (Top 10%) on the Upwork marketplace. ✔️ Over 5+ years of experience. ✔️ Completed 26+ long term successful projects with 8k+ earned!! ✔️ Worked 100+ hours. 💬 Let’s build security that enables growth, not slows it down. ✅ 𝗖𝗹𝗶𝗰𝗸 “𝗛𝗜𝗥𝗘” 𝘁𝗼 𝘀𝘁𝗮𝗿𝘁 𝗺𝗼𝘃𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗽𝗿𝗼𝗷𝗲𝗰𝘁 𝗳𝗼𝗿𝘄𝗮𝗿𝗱!

🚨 Is your business truly secure? One breach can damage your brand, leak customer data, or shut down operations. That’s where I come in. 👋 I'm Hasnain — a Cybersecurity Specialist with over 8 years of experience in: ✅ Penetration Testing (Web, Mobile, Cloud) ✅ GRC Implementation (ISO 27001, NIST, PCI-DSS, SOC 2) ✅ Security Operations (SOC) – Incident response, threat hunting ✅ Cloud Security Audits – AWS, Azure, GCP ✅ Vulnerability Assessments – Automated & Manual 🔐 I help clients with: ✔️ Conducting in-depth Security Audits and Risk Assessments ✔️ Building robust Security Policies & Compliance Roadmaps ✔️ Performing Manual Pentesting and Exploiting Real-World Vulnerabilities ✔️ Securing WordPress / Shopify / Custom Web Apps from Brute Force & Malware ✔️ Implementing frameworks: ISO 27001, NIST CSF, SACS-002, NCA, PDPL 💼 Why clients choose me: ⭐ Top-rated with 100% client satisfaction 🛡️ Hands-on expertise backed by real-world results 🧠 Clear communication and client education 📄 Professional documentation with actionable recommendations 📌 Let’s work together to secure your digital assets and ensure compliance. 📬 Message me now for a free consultation or quote!

My Expertise and Portfolio: ===================== I am a skilled and experienced penetration tester, right now working for a financial institute in Riyadh. In my career, I have completed various projects for different government and private organizations including multiple Banks, telecom organizations, automobile companies, Federal Board of Revenue, universities and SMEs. For these organizations I performed grey and black boxed penetration testing on Web and Mobile Applications, APIs and Networks. Certifications: =========== To prove my skills on paper, I cleared following reputed certifications to prove my skills. - OSCP+ - Offensive Security Certified Penetration Tester by Offsec - eWPTX - Web Appplication Penetration Testing Extreme by eLearn - CWES - Certified Web Exploitation Specialist by HTB - PNPT - Practical Network Penetration Testing by TCM Security - CEH -Master - Certified Ethical Hacker - Master (CEH) by Ec-Council (Practical and Theory) - API Penetration Testing By APISEC University - Autopsy for Digital Forensic Skill set: ====== During my penetration testing assignments, I have identifed various CRITICAL and HIGH level vulnerabilities such as SQL Injection, RCE, SSRF, Directory Traversel, LFI, RFI, XSS and CSRF. Apart from the manual skills, I have good drip on following tools to give best quality results. For the Web Application = Burpsuites, Nessus, Nmap, Nikto, Accunetix, metasploit, sqlmap, For Mobile Applications = Frida, Objection, jadx, apktool, Androguard, MobSF, Drozer, For Network = Nessus, Nmap, CrackMapExec, HashCat, Impacket, Mimikatz, Bloodhound, Proxychains. Report Writing: =========== I can write a Professional Penetration testing report for all kind of Penetration Testing assessments.

I help with small Python, Excel, CSV, data cleanup, and cybersecurity support tasks for clients who need fast, practical help. I recently completed my first Upwork project with a 5-star review, and I’m focused on clear communication, accuracy, and reliable delivery. I am Security+ certified and can assist with beginner-friendly cybersecurity support tasks such as security research, awareness content, basic checklists, phishing analysis, documentation, and organizing security-related data or reports. I can assist with: - Cleaning and organizing Excel, CSV, and JSON files - Building small Python scripts for repetitive tasks - Parsing or organizing logs, reports, and structured data - Creating clear documentation and step-by-step instructions - Basic cybersecurity research and checklists - Security awareness and phishing-related content - Testing websites or tools and reporting issues clearly I focus on simple, well-defined tasks where the goal is clear. I communicate clearly, follow instructions carefully, and use modern AI tools to work faster while still reviewing the final result before delivery. If you need help with a simple automation, data cleanup, or cybersecurity support task, I’d be happy to help.