Skip to content
View Nouman-J-Nizami's full-sized avatar
29 followers · 21 following

Block or report Nouman-J-Nizami

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Nouman-J-Nizami/README.md

Hi, I'm Nouman Nizami 👋

Cybersecurity Analyst | GRC & Compliance | ISO/IEC 27001 | NIS2 | Risk Management

I combine an industrial engineering background with hands-on cybersecurity training and practical security experience, with a focus on Governance, Risk & Compliance (GRC), information security, security operations, risk management, and regulatory frameworks.

🔎 Focus Areas

  • Governance, Risk & Compliance (GRC)
  • ISO/IEC 27001 & NIS2
  • Risk Assessment & Security Controls
  • Information Security Management Systems (ISMS)
  • Security Operations & Incident Response
  • Vulnerability Assessment & Security Testing
  • Industrial & OT Cybersecurity

🛠️ Tools & Technologies

Splunk SIEM Wazuh Nmap Nessus Rapid7 Metasploit Wireshark Kali Linux EDR Threat Intelligence

🔍 Technologies & Security Platforms

SIEM EDR NDR Threat Intelligence Vulnerability Management Network Security Zero Trust

📁 Certifications

  • CompTIA Security+ (SY0-701)
  • ISO/IEC 27001 Lead Implementer – PECB (Exam Passed – Certification Pending)
  • Cybersecurity Analyst – Professional Training Program — EPICODE Institute of Technology

📌 Featured Projects

Selected cybersecurity projects focused on ISO/IEC 27001 risk assessment, MITRE ATT&CK-aligned threat intelligence, Wazuh SIEM incident response, vulnerability assessment, network security, and security reporting.

🤝 Let's Connect

LinkedIn

📍 Based in Upper Austria, Austria

Pinned Loading

  1. ISO27001_Cloud_Migration_Risk_Assessment ISO27001_Cloud_Migration_Risk_Assessment Public

    Governance, Risk and Compliance case study covering risk assessment, treatment planning, control mapping and cloud security governance. compliance, cloud security and risk management.

  2. ISO27031-Business-Continuity-and-Disaster-Recovery ISO27031-Business-Continuity-and-Disaster-Recovery Public

    Business Continuity, Disaster Recovery and ICT Readiness analysis based on ISO/IEC 27031.

  3. Cyber-Risk-Threat-Assessment-Report-Aligned-with-ThreatConnect-OWASP-Top-10-and-MITRE-ATT-CK Cyber-Risk-Threat-Assessment-Report-Aligned-with-ThreatConnect-OWASP-Top-10-and-MITRE-ATT-CK Public

    Cyber risk and threat assessment project aligned with MITRE ATT&CK, OWASP Top 10, ISO 27001, NIST, and Threat Intelligence methodologies.

    1

  4. Vulnerability-Assessment-and-Security-Analysis-Report Vulnerability-Assessment-and-Security-Analysis-Report Public

    Security assessment project focused on vulnerability identification, risk analysis, remediation planning, and security posture improvement.

  5. Cybersecurity_Incident_Response_SOC_CSIRT_Wazuh_SIEM_Lab_Report Cybersecurity_Incident_Response_SOC_CSIRT_Wazuh_SIEM_Lab_Report Public

    Incident response and SOC operations project using Wazuh SIEM/XDR for threat detection, investigation, alert analysis, and security monitoring.

    1

  6. Social-Engineering-Laboratory-Report-Phishing-Simulation-and-Credential-Harvesting Social-Engineering-Laboratory-Report-Phishing-Simulation-and-Credential-Harvesting Public

    Social Engineering awareness and phishing simulation project using SET (Social Engineering Toolkit) to analyze credential harvesting techniques and improve security awareness.

    1