Javeria Hassan

I am an experienced IT Governance, Risk, and Compliance (GRC) professional with a strong focus on aligning technology with business objectives while ensuring regulatory compliance and information security. With hands-on expertise in frameworks such as ISO 27001, NIST CSF, SOC2, COBIT and GDPR, I specialize in building and maintaining robust IT governance structures and risk management programs for diverse organizations.

Over the past few years, I have conducted maturity assessments, control evaluations, internal audits and cybersecurity gap analyses for organizations across banking, fintech, and technology sectors. My approach blends strategic oversight with practical execution enabling companies to not only meet compliance obligations but also strengthen their operational resilience.

I have led the documentation and implementation of enterprise-wide IT policies, including Access Control, Incident Management, Data Protection, and Business Continuity. I’ve also supported organizations in preparing for external audits and achieving certifications such as ISO/IEC 27001. My strong understanding of risk registers, policy governance, and control testing has helped management make informed decisions backed by real data and insights.

Currently working as a Information Security Specialist at a consulting firm. I collaborate with internal and external stakeholders, C-level executives, and technical teams to ensure cybersecurity and compliance objectives are effectively met. I am passionate about continuous learning and hold certifications like CISA, ISO Lead Implementer, and others relevant to the GRC domain.

I believe in building a secure, compliant, and resilient IT environment that enables business growth without compromising on risk or governance. I thrive in dynamic environments where I can bring structure, clarity, and value through a risk-based and standards-driven mindset.