Wasim Jafri: Professional Profile

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 3

Wasim Jafri

SERVICENOW PROFESSIONAL | SECURITY CONSULTANT


waseemjafri01@gmail.com | Parkville, VIC, Australia | +61 468 446 064

Professional Profile
To apply and continue to develop my Information Technology skillset to help achieve exceptional results for
my employer/customer. To effectively use my IT Service Management and niche ServiceNow experience
across various industries to deliver the best possible outcomes and meeting desired KPIs.

Area of Expertise

• ServiceNow Consultant
• Program Management
• Cyber Security - Governance, Risk and Compliance
• Agile/Scrum
• Business Analysis
• Stakeholder Management

Technical Skills & Certifications

• ServiceNow Next Gen Program: Certified System Administrator, Certified Application Developer*
• Frameworks: ITIL, NIST, ISO
• Technologies: ServiceNow, Splunk, SEIM, AWS Console, Endpoint Protection
• AWS, AZURE
• CompTIA Pentest+
• Certified Risk Information System Control
• Certified Ethical Hacker (V11)

Career History

SERVICENOW May’ 2022- Oct 2022


ServiceNow Professional (NEXT GEN)

As a part of Next Gen ServiceNow program, received extensive training and learning plan which includes CSA
and CAD. Coached by various ServiceNow SME’s, academic institutions, nonprofit organisations, governments,
and workforce development organisations in this program. Real- time hands on experience working on Servi-
ceNow projects with end to end implementation.

TMLABS ( Project Internship)


Reporting to the Risk and compliance manager, I was responsible for assisting with the design and implementa-
tion of how the data flow would look like once integrated. Alongside, I was also working on a internal work ap-
plication project which mainly focused on instances running out of space and how can this issue be resolved.
Designed and developed use cases using AWS, integrating cold data outside of ServiceNow to
S3 bucket. On the other hand, I was focusing on the training and learning plan for ServiceNow certifications.

CRETX INC. May’ 2020 - Jan’ 2022


Cyber Security Consultant (GRC)

Reporting to the Cyber Risk and Compliance manager, my task was to be responsible for assisting with the de-
sign and implementation of secure risk and compliance related solutions to ensure that information assets
and associated technology, applications, systems, infrastructure and processes are adequately protected in
the digital ecosystem in which we operate.

• Managed a portfolio of Third Party Security Assessments. This includes leading meetings, sending out secu-
rity questionnaires, analysis of security questionnaire answers and the completion of assessment reports.
• Work with corporate legal and compliance representatives to identify all related Technology compliance re-
quirements (i.e., security, user access, privacy, data integrity, etc.) associated with the laws and regulations
within all relevant jurisdictions)
• Create and implement Policies, Standards, Procedures and Guidelines as per information security require-
ments
• Assist in the creation of a compliance risk assessment framework and periodically assess the regulatory,
commercial and organisational, inherent and residual technology compliance risks
• Perform Vendor security assessments
• Cyber security GAP assessments (NIST, ISO27001)
• Facilitate workshops and participate in working groups.
• Perform ISO Internal audits and assessments
• Develop communication to the Business Stakeholders
• Provide remediation guidance and prepare management reports to track remediation activities.

KODEZ May’ 2021 – Nov’ 2021


Information Security Consultant
(ISMS, ISO27001, RISK MANAGEMENT & SECURITY GOVERNANCE)
Project: ISO27001 Certification compliance Web application
Reporting to the project manager, the task for this project was to provide an efficient information security
compliance standard (ISO27001) with objectives to provide the information required by the clients to enable
them to validate their organisations standard with the compliance standards. Developing a user friendly and
informative web application to help even a non-technical employee understand and redirect to the con-
cerned team for information.

• Understanding the project scope and requirements


• Plan, organise and manage project and process enhancement work efforts
• Creating wireframes and checklists and also continuously monitoring and tracking the work with JIRA
• Provide weekly status reports as requested by the project manager
• Implement and maintain information security solutions to support the ISO27001
• Actively participated in the business meeting with the external stakeholders for project implementation.

Education

La Trobe University : Masters of Cyber Security (2022)

GLS University: Bachelors of Business Administration (2019)

Strengths
• Ability to work in and lead a team.
• Effective problem analysing skills.
• Good communication and presentation skills.
• Efficient time management skills for timely delivery of products to the customer.

References: Available On Request

Wasim Jafri

You might also like