Usman Haider

Helping clients meet information security compliance and regulatory requirements.

Ensured compliance with ISO 27001:2022, SOC 2 Type II, and PCI DSS 4.0 via gap assessments and internal audits. Strengthened GDPR and CCPA compliance, earning special recognition. Contributed to policy development, document control, and asset classification. Delivered department-specific security awareness training with effectiveness assessments. Maintained the risk register through regular risk assessments using vanta. Performed multiple 2nd-party audits to assess partner security compliance.

Gained strong expertise in incident management methodologies. Worked with Microsoft Sentinel, Azure Entra ID, MS 365 Defender, and Defender for Endpoints for advanced threat detection. Performed incident forensics and closely monitored user/device logs for threats.