Mashal N.
Mid-Level Cybersecurity GRC Analyst
Open to offersNew to PlatformAbout
Mashal N. is a skilled Cybersecurity GRC Analyst based in Dubai, UAE, with over three years of experience enhancing risk management, compliance, and security governance in diverse client environments across the UAE and Pakistan. Her expertise includes performing vulnerability assessments and implementing security controls in alignment with industry-standard frameworks such as ISO 27001, NIST, and CIS Controls. Mashal is adept at contributing to the development of Information Security Management Systems (ISMS) and managing risk registers. She has effectively conducted comprehensive risk assessments, developed security governance documentation, and supported audit readiness initiatives. Working with clients in healthcare, finance, and technology sectors, she has applied vulnerability scanning tools like Nessus and OpenVAS, and engaged in penetration testing, providing detailed remediation roadmaps. Currently, she is pursuing the Microsoft SC-900 Security, Compliance, and Identity Fundamentals certification. Her educational background includes a Master's degree in Information Security and a Bachelor's degree in Electronic Engineering from NED University of Engineering & Technology.
Experience
Cybersecurity Analyst – GRC
Tech Trade Solutions Pvt. Ltd · 2024 — PresentSupported GRC and compliance efforts for client environments in U.A.E and Pakistan, focusing primarily on ISO 27001 and NIST frameworks. Assisted with risk assessments, updated risk registers, and performed control gap analysis under supervision. Contributed to the creation of ISMS documentation such as policies, procedures, and compliance records. Conducted vulnerability assessments, coordinated remediation activities with technical teams, and ensured the implementation of security controls was adhered to. Assisted in preparing for audits through evidence collection and documentation review, while also carrying out third-party vendor risk assessments and contributing to incident reporting and tracking.Information Security Analyst
Virtual Security (Architect of Information Security) · 2021 — 2024Led risk assessments and vulnerability evaluations in over 10 client environments, identifying security gaps in accordance with NIST Cybersecurity Framework and ISO 27001 standards. Developed security governance documentation encompassing policies, procedures, and risk treatment plans that improved compliance for clients in healthcare, finance, and technology. Performed penetration testing and security evaluations utilizing tools like Nessus, OpenVAS, Burp Suite, and OWASP ZAP, producing detailed documentation and prioritization for remediation efforts. Collaborated with cross-functional teams to enforce security controls and compliance requirements, conducting workshops and gathering sessions to align security initiatives with business needs. Managed security incident responses and third-party vendor security assessments to ensure timely remediation and enhance security controls.Cybersecurity Analyst Intern
SenseLearner Technologies Pvt. Ltd · 2023 — 2023Assisted in the monitoring of security controls and the analysis of security alerts, while documenting incident response procedures based on industry best practices. Supported vulnerability assessments, generated reports, and documented threat intelligence in alignment with cybersecurity standards.
Skills & Expertise
Education
- Master of Science in Information SecurityNED University of Engineering & Technology · 2018 — 2022
- Bachelor of Engineering in Electronic EngineeringNED University of Engineering & Technology · 2014 — 2017
Interested in this professional?
Sign in as an employer to save this profile or invite Mashal N. to a job.
Sign in as an employer