Upwork home
Sign up
Project Catalog
DesignDesign
Video & AudioVideo & Audio
Development & ITDevelopment & IT
MarketingMarketing
Writing & TranslationWriting & Translation
MoreMore

You will get Risk Assessment, Risk Treatment and Vulnerability Assessment for a Company

Shahzad A.Status: Offline
Shahzad A. Shahzad A.
4.9
Preview imagePreview image

Let a pro handle the details

Buy Assessments & Penetration Testing services from Shahzad, priced and ready to go.
Shahzad A.Status: Offline
Shahzad A. Shahzad A.
4.9
Preview imagePreview image

Let a pro handle the details

Buy Assessments & Penetration Testing services from Shahzad, priced and ready to go.

Project details

I am an Information Security specialist and have practical experience in Risk Analysis, Vulnerability Assessment, Threat Identification, and Risk Treatment according to the ISO standards (ISO_IEC 27005-2008, ISO_IEC 133351-2004, ISO 22301-2012, ISO 31000-2018, ISO_IEC 27001-2013).

I will provide the following services but are not limited to the subdomain of Information Security Risk Management:
- Review your business
- Identification of Vulnerabilities
- Identification of Threats
- How to treat risks
- Gap Analysis
- Analysis of Risks and Residual Risks
- Guideline for Security Improvement
- Guideline for making Information Security Policy
- Making of a detailed report

Why me?
- 5 years + of professional experience in IT and Tech companies
- An Information Security Specialist
- Quick response time
- 100% client's satisfaction

Let's discuss your problem.
Cybersecurity Expertise
Audit, Risk Assessment, Gap Analysis
Technology Type
Firewall, IaaS, Computer Network, Data Center, Database, Operating System, SaaS, Web Application, CRM, Email System, ERP, Mobile Device
Cybersecurity Regulation
GDPR, ISO
What's included
Service Tiers Starter
$99
Standard
$199
Advanced
$399
Delivery Time 2 days 3 days 5 days
Application Audit
Project Plan
-
-
Cost Estimation
-
Optional add-ons You can add these on the next page.
Fast Delivery
+$99
4.9
28 reviews
96% Complete
(27)
4% Complete
(1)
1% Complete
(0)
1% Complete
(0)
1% Complete
(0)

PA

Precious A.
5.00
Oct 12, 2025
Website/App design for Agriculture management I highly recommend Shahzad, you won’t find another freelancer that will commit to your work as he does. I worked with him for almost 2 years. Great guy all round.

MH

Mike H.
5.00
Jun 8, 2025
You will get your own custom cryptocurrency/coin

LT

Lj T.
5.00
Apr 9, 2025
30 minute consultation Good guy to work with 👍

IS

Inderpreet S.
4.45
Feb 7, 2025
30 minute consultation Shahzad is extremely helpful and has sound blockchain knowledge.

MM

Michael M.
4.80
Dec 12, 2024
Digital Investigation/ Forensics
Shahzad A.Status: Offline

About Shahzad

Shahzad A.Status: Offline
vCISO & Cybersecurity Consultant | ISO 27001, PCI-DSS, GDPR & SOC 2
100% Job Success
4.9  (28 reviews)
Islamabad, Pakistan - 1:29 am local time
I lead global firms from 0% to 96% audit readiness for ISO 27001 and SOC 2 Type II. If you need a vCISO to own your security roadmap and secure $400M+ in assets, not just someone to fill out paperwork, let’s get you certified.

Overview:
I build security programs that organizations can rely on, not just compliance documents that sit in a folder.
With 5+ years of international experience and 60+ completed engagements, I serve as a virtual CISO (vCISO) specializing in bridging the gap between technical security and executive board requirements. My recent work includes driving an international BPO from near 0% to 96% compliance across ISO 27001:2022 and SOC 2 Type II frameworks.

HOW I SOLVE YOUR SECURITY CHALLENGES:
- Audit Readiness (ISO 27001 & SOC 2): Full ISMS implementation, gap analysis, and policy design. I don't just advise; I own the program until you are certified.
- vCISO & Strategy: Fractional security leadership for firms managing $430M+ in assets. I provide the strategy you need without the $250k/year full-time salary.
- Cloud Security Architecture: Specialized in Microsoft Sentinel SIEM deployment, Zero Trust design, and Azure/M365 hardening.
- Digital Forensics: 19+ investigations completed across compromised systems with court-ready reports delivered.

SELECTED IMPACT:
- Designed security frameworks for Uganda’s largest hospital.
- Built 40+ SOC incident response playbooks for a global mobility platform.
- Deployed SIEM for the World Monuments Fund.

READY TO SECURE YOUR ORGANIZATION?
Message me to request my "SOC 2 Audit-Ready Checklist" or to schedule a 15-minute scoping call. 🤝

Steps for completing your project

After purchasing the project, send requirements so Shahzad can start the project.

Delivery time starts when Shahzad receives requirements from you.

Shahzad works on your project following the steps below.

Revisions may occur after the delivery date.

Discussion

In this section, we will discuss your problem and will an agreement and plan of doing.

Risk Analysis

In this step, I will do the job according to your given instructions.

Review the work, release payment, and leave feedback to Shahzad.