💼 Work

• ▹ Leading OT/ICS cybersecurity governance, risk, and compliance initiatives across critical infrastructure environments, ensuring alignment with ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0, ISO 27001:2022, and regional regulatory frameworks.
• ▹ Conducting risk-based OT cybersecurity assessments and audits across industrial networks, control systems, and supporting IT environments, covering OT security controls, policies, segmentation, access control, monitoring, and incident readiness.
• ▹ Performing integrated OT/IT risk assessments aligned with IEC 62443 security levels, zone & conduit models, and enterprise risk management practices, identifying systemic gaps and defining practical remediation roadmaps.
• ▹ Advising clients on OT cybersecurity compliance strategies, CSMS development, risk treatment plans, and policy frameworks, bridging engineering, operations, IT, and governance teams.
• ▹ Evaluating OT/IT governance, infrastructure, applications, and IAM controls, including RBAC for OT environments, privileged access, and identity boundaries between IT and industrial networks.
• ▹ Developing OT-specific SOPs, cybersecurity management procedures, and assurance artifacts; testing ITGCs and application controls where IT systems support OT operations.
• ▹ Preparing executive-ready OT cybersecurity audit and assurance reports, translating technical findings into risk-based insights for leadership, regulators, and external auditors.
• ▹ Leveraging prior cloud security and DevSecOps experience to support secure-by-design principles for industrial digitalization, OT-adjacent platforms, and enterprise integration layers.

• ▹ Linux server installation, administration, hardening, performance tuning, and patching.
• ▹ Managed AWS resources and worked on IaC tools including Terraform, Ansible, and CloudFormation.
• ▹ Designed, implemented, and maintained AWS cloud solutions to meet client requirements.
• ▹ Built and maintained CI/CD pipelines to automate the deployment process and improve release management via Jenkins.
• ▹ Optimised Kubernetes infrastructure for application deployment; scaled and managed containerised applications on Kubernetes clusters.
• ▹ Maintained infrastructure as code scripts for provisioning and configuration management.
• ▹ Applied security best practices to safeguard applications and data across cloud infrastructure.

• ▹ Architected and deployed security-hardened AWS infrastructure (EC2, VPC, S3, CloudFront, Lambda) with CIS benchmarks alignment.
• ▹ Led end-to-end development and cloud deployment of the world's largest online fairy tale library, managing codebase, performance, and scalability for global traffic.
• ▹ Built and automated CI/CD pipelines using Jenkins & GitHub Actions enabling zero-downtime deployments and rapid release cycles.
• ▹ Implemented IAM policies, security groups, and network segmentation for multi-tier cloud applications.
• ▹ Established CI/CD security gates via Jenkins/GitHub Actions, ensuring automated vulnerability scanning pre-deployment.
• ▹ Designed monitoring and audit logging (CloudTrail, CloudWatch) to support security incident response and compliance evidence.
• ▹ Secured cloud-native platform serving a global user base with 99.9% uptime, automated threat detection, and zero critical security incidents.

• ▹ Engineered secure custom web applications and CMS platforms, implementing input validation, authentication controls, and secure API integrations.
• ▹ Conducted security-focused code reviews and vulnerability remediation in PHP/JavaScript environments.
• ▹ Managed secure site migrations and infrastructure hardening, reducing attack surface and improving resilience.
• ▹ Implemented SEO and performance optimisation with security considerations (HTTPS, secure headers, access controls).
• ▹ Integrated security checkpoints into development lifecycle, ensuring consistent hardening standards across all deliverables.

• ▹ Led secure delivery of 20+ web platforms for US, European, and Australian clients across diverse industry verticals.
• ▹ Functioned as client-facing technical advisor on security-conscious platform decisions and web architecture.
• ▹ Managed distributed development teams executing projects with embedded security and quality standards.
• ▹ Built long-term client partnerships through transparent communication, risk mitigation, and consistent delivery excellence.
• ▹ Established foundational delivery methodologies and security practices adopted in subsequent organisational growth.

Managed editorial and research operations for a peer-reviewed medical journal, ensuring rigorous documentation standards and compliance with publication ethics. Led data analysis and technical reporting for research initiatives, while coordinating proposal development and stakeholder submissions.

Coordinated multi-phase development programs, managing documentation, stakeholder reporting, and proposal development (RFPs). Built early capabilities in project governance, data management, and cross-functional communication.

Managed customer-facing operations for telecom services, handling account provisioning and technical support via web-based systems. Developed foundational skills in process adherence, data handling, and service delivery in a regulated technology environment.