Syed's CV
Syed Abbas Ali Razvi
Information Security Manager | Compliance
Profile summary
Information Security Manager | Compliance with 15 years of experience, transitioning from technical support engineering to information security management. This professional applies expertise in NIST SP 800-171, ISO 27001, and ISO 42001 frameworks, supported by CISA and ISO Lead Auditor credentials. Fluent in English, Hindi, and Telugu, this individual manages information assurance programs and coordinates cross-cultural teams across the GCC region.
Career highlights
Compliance and Risk Management: Governs the Information Security Management System as an ISO 27001 Lead Auditor, while managing NIST SP 800-171 compliance readiness and CMMC Level 1 and 2 self-assessments.
Information Assurance and Governance: Directs the Information Assurance program by enforcing enclave-level security policies and integrating Artificial Intelligence Governance frameworks in alignment with ISO 42001 Lead Auditor principles.
Security Operations and Audit: Executes ITGC audits and drives remediation strategies to close vulnerabilities, while maintaining 01 central point of control for system integrity through security software deployment.
Professional Certification: Maintains professional standing through 6 certifications including CISA, ISO 27001 Lead Auditor, and ISO 42001 Lead Auditor to support enterprise-wide risk assessment and governance initiatives.
Key skills
Professional experience
Shapes the enterprise information security strategy and governs the Information Security Management System. Steers the Information Assurance program while managing compliance readiness and risk assessment frameworks across the organization.
- Lead comprehensive enterprise-wide risk assessments and govern the Information Security Management System (ISMS) as a certified ISO 27001 Lead Auditor.
- Direct & implement the organization's Information Assurance (IA) program, fulfilling IAM Level II responsibilities by establishing, enforcing, and monitoring enclave-level security policies and procedures.
- Lead CMMC Level 1& 2 Self-Assessment and NIST SP 800-171 compliance readiness, conducting gap assessments to ensure the cryptographic and physical protection of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
- Develop, maintain, and oversee comprehensive System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms), updating the Supplier Performance Risk System (SPRS) as required by federal mandates.
- Lead enterprise wide risk assessments and govern the Information Security Management System (ISMS) utilizing CISA and ISO 27001 Lead Auditor frameworks.
- Architect Identity and Access Management (IAM) strategies, enforcing least-privilege principles, Multi- Factor Authentication (MFA), and secure access protocols aligned with stringent DoD access control requirements.
- Incident management workflows and coordinate enclave-level incident response, minimizing operational impact, executing root-cause analysis, and ensuring timely regulatory reporting.
- Execute ITGC audits, perform detailed control testing, and drive audit remediation strategies to close critical security vulnerabilities.
- Govern AI security policies and integrate Artificial Intelligence Governance frameworks in alignment with ISO 42001 Lead Auditor principles.
- Automate compliance tracking, continuous risk monitoring, and enterprise governance reporting for executive stakeholders.
Managed technical infrastructure and hardware maintenance for the organization. Oversaw the deployment of network systems and provided direct support to staff to ensure operational continuity across the office environment.
- Configured local area networks and server hardware to maintain connectivity for staff.
- Executed routine system updates and hardware repairs to prevent downtime.
- Provided technical troubleshooting for software and peripheral equipment issues.
Provided technical support for hardware, software, and network operations within a regional service environment. Contributed to the maintenance of operational continuity through the execution of access management and incident resolution protocols.
- Resolved hardware and software technical issues to maintain system availability.
Education
Information Technology
Certifications
Languages
English · Professional
Hindi · Professional
Telugu · Professional
Arabic · Basic