Mushtaq Ahmed
IT Manager – Data Center | Security & Compliance Auditor (Remote – USA)
📞📞 - ✉-🌐🌐 www.linkedin.com/in/mushtaq-ahmed-57b02232
📍📍 Islamabad, Pakistan
――――――――――――――――――――――――――――――――――――――――――――――――――――――――
――――――――――――――――――――――――――――――――――――――――――――
Professional Summary
As an experienced IT Infrastructure & Information Security Professional, I bring over 17 years of expertise in managing large-scale IT
operations, Tier 3 data centers, and enterprise-level cybersecurity compliance. Currently serving as IT Manager – Data Center at Riphah
International University and providing remote consulting services to U.S.-based firms as a Security & Compliance Auditor, I bridge the gap
between operational efficiency and security governance.
At Riphah, I lead the design, deployment, and administration of high-availability LAN/WAN networks, enterprise firewalls (Fortinet, Cisco,
Sophos), VPNs, disaster recovery sites, and helpdesk systems. I manage a Tier 3-compliant data center, oversee virtualization (VMware
ESXi, Hyper-V), cloud platforms (Office 365, G Suite), and implement ISO 27001-aligned data protection strategies. I am also responsible
for IT budgeting, procurement, vendor management, and ensuring uninterrupted IT support across 30,000+ users.
In parallel, I work as a Security & Compliance Auditor for U.S. companies, conducting SOC 2 and ISO 27001 audits. I specialize in risk
assessments, control gap analysis, policy and evidence reviews, and audit readiness using platforms like Vanta, Drata, and Secureframe. I
support clients across the U.S. and EU regions by aligning IT environments with global compliance standards such as ISO 27001, SOC 2,
GDPR, HIPPA and ISO 9001.
This unique combination of data center leadership, network security administration, and international compliance auditing positions me to
deliver robust, secure, and scalable IT solutions aligned with both organizational and regulatory goals.
Key Skills:
•
Data Center & Infrastructure Management: Hands-on experience managing Tier 3-compliant Huawei data centers, including UPS,
HVAC, access control, and fire suppression systems.
•
Network Administration & Security: Skilled in LAN/WAN, VLANs, routing & switching, VPNs, DMZ setups, and managing NextGen Firewalls (Fortinet, Cisco, Sophos).
•
Information Security & Compliance (ISO 27001, SOC 2): Successfully implemented ISO 27001 ISMS frameworks, led policy
development, and conducted internal audits; currently auditing SOC 2 compliance for US-based clients using Vanta, Drata, and
Secureframe.
•
Disaster Recovery & Business Continuity: Established DR site architecture for university campuses and hospitals, ensuring operational
resilience and data protection.
•
Governance, Risk & Compliance (GRC): Strong command of GRC principles including risk assessments, audit readiness, evidence
review, and regulatory alignment with ISO 27001, SOC 2, GDPR, ISO 9001, and HIPPA.
•
Virtualization & Server Management: Proficient with VMware ESXi, Hyper-V, Windows Server, Active Directory, Group Policies,
Office 365, and G Suite.
•
IT Project Management: Led critical IT infrastructure upgrades, helpdesk system deployments, firewall replacements, and SaaS
platform integrations with high availability and security.
•
Security Awareness & Documentation: Conducted security training, developed policies, audit documentation, and supported
internal/external assessments.
•
IT Budgeting & Vendor Management: Oversaw procurement planning, vendor negotiations, licensing, and CAPEX/OPEX
management for data center and network operations.
•
Compliance Platforms & Tools: Hands-on experience with compliance automation platforms (Vanta, Drata), audit documentation
(Confluence, SharePoint), and vulnerability scanning tools (Nessus, Power BI).
•
Client-Record Audit & Communication: Leading SOC 2/ISO 27001 client engagements remotely for U.S. companies; managing audit
timelines, weekly updates.
•
Incident Response & Risk Mitigation: Designed and executed incident response strategies, reducing vulnerabilities and aligning
mitigation plans with compliance requirements.
WORK EXPERIENCE
🧾🧾 Security Compliance Auditor (Remote)
• Security & Compliance Auditor | Prescient Security | April 2025 – Present Currently engaged in performing IT audit assignments
focused on ISO 27001 and SOC 2 frameworks for clients across the US and EU regions.
•
• Audit & Compliance Management
• Conduct readiness assessments and evaluate the design and operational effectiveness of IT controls against ISO 27001 and SOC 2
frameworks.
• Analyze client-submitted policies and evidence to ensure compliance with control requirements, identifying gaps in documentation or
implementation.
• Communicate clear findings and suggest actionable remediation steps to management, proactively reporting potential issues or risks to
team leads.
• Manage compliance workflows and evidence tracking using platforms like Vanta, Drata, and Secureframe.
• Client & Project Leadership
• Lead client meetings and provide weekly status updates, ensuring adherence to audit timelines and maintaining accuracy in
documentation.
• Align client environments with international security standards, strengthening overall security posture.
• Audit & Policy Analysis
• Analyzed provided evidence data to ensure adherence to relevant control points and identified gaps in policies and/or evidence.
• Communicated work status regularly to team leads.
• Security Protocol Support
• Assisted in the development and implementation of security protocols to safeguard company data.
• Conducted basic risk assessments and provided recommendations for mitigation.
• Supported documentation efforts, including updating security policies and maintaining audit records.
• Collaborated with the IT team to enhance network security and resolve vulnerabilities.
🧾🧾 IT MANAGER – Data Center
• Riphah International University — Dec 2008 – Present | Islamabad, Pakistan
🔹🔹 Data Center Operations & Uptime Management
• Manage Tier 3-compliant data center with high availability architecture, ensuring >99.9% uptime for mission-critical systems.
• Lead preventive and corrective maintenance of servers, network equipment, power systems, and cooling infrastructure.
• Implement real-time infrastructure monitoring using SNMP and DCIM for environment and equipment status.
🔹🔹 Capacity Planning & Infrastructure Scalability
• Forecast power, cooling, and rack space requirements based on institutional growth and service demand.
• Plan and execute infrastructure upgrades and expansions, including hardware refresh cycles and virtualization consolidation.
🔹🔹 Asset Management & Energy Optimization
• Maintain comprehensive inventory of IT, facility, and support equipment.
• Implement energy-efficient strategies including airflow optimization and rack-level cooling improvements.
🔹🔹 Security, Compliance & Disaster Recovery
• Enforce strict physical and logical access controls for data center areas and systems.
• Conduct risk assessments and security audits aligned with ISO 27001 and other relevant standards.
• Design and execute disaster recovery (DR) and business continuity plans aligned with RTO/RPO goals.
🔹🔹 Team Management & Staff Development
• Lead and mentor a 24-member IT operations and data center team including NOC engineers, system admins, and support staff.
• Develop staff through targeted training, technical certifications, and cross-functional upskilling.
🔹🔹 Project & Vendor Management
• Manage end-to-end infrastructure projects including SAP ERP, Healthcare & Students ERP hosting, DR site build-out, firewall and
security implementations.
• Oversee vendor contracts for UPS, CRAC, PDU, CCTV, structured cabling, and DCIM systems.
• Ensure vendors meet SLAs and perform timely preventive maintenance.
🔹🔹 Virtualization, Cloud & Hybrid Environments
• Administer virtual environments using VMware ESXi, Hyper-V, and Proxmox.
• Manage hybrid cloud services through G Suite, Office 365, and Azure integrations.
• Enable workload distribution and secure data access across cloud and on-prem platforms.
🔹🔹 Monitoring, Automation & Incident Management
• Utilize DCIM tools, SNMP traps, MRTG/PRTG, SolarWinds, and Power BI dashboards for performance and incident tracking.
• Develop automation scripts to optimize routine operational tasks and reduce manual intervention.
• Coordinate 24/7 support coverage and ITSM-based ticketing for SLA-driven incident resolution.
🔹🔹 Budgeting & Cost Optimization
• Develop and manage IT/data center budgets, ensuring efficient use of financial resources.
• Achieve cost savings via vendor renegotiations, energy optimizations, and license consolidations.
🔹🔹 Technology Environment:
• Power & Cooling: UPS (APC, Huawei), PDUs, CRAC/CRAH, HVAC, fire suppression, biometric access
• Network: Cisco, Fortinet, Sophos, Dell, Huawei, LAN/WAN, VLANs, VPN, Routing, BGP, MPLS
• Storage: SAN/NAS, Data Domains, centralized backups, disaster recovery architecture
• Security: ISO 27001, SOC2, WAF, IPS/IDS, Next Gen Firewalls, CCTV, Access Control
• Virtualization/Cloud: VMware ESXi, Hyper-V, Azure, G Suite, Office 365, Huawei Cloud
• Monitoring/Automation: SNMP, DCIM, PRTG/MRTG, SolarWinds, Power BI, custom scripts, ITSM ticketing
PROJECTS
Projects at Riphah International University
• Network Deployment: Designed and implemented secure networks across multiple campuses.
• Tier 3 Compliant Data Center: Designed and configured the Huawei Tier 3-compliant data center.
• ISO 27001 Implementation: Achieved ISMS certification through rigorous policy development and implementation.
• Disaster Recovery Site: Set up a DR site at Lahore campuses, ensuring business continuity and data protection.
• Next-Generation Firewall Deployment: Enhanced organizational security through NGFW implementation.
• Helpdesk System Deployment: Streamlined IT support operations with centralized ticketing and workflow automation.
• High Availability Network Upgrade: Upgraded core and distribution layers to ensure high availability and redundancy.
• Sangfor Internet Access Management: Deployed Sangfor IAM solution to control internet access and optimize bandwidth.
• Unified Communication Tools Implementation: Successfully implemented MS Teams, G Suite, and Office 365 for students and staff.
Business or Sector: Education Department IT Email-Website www.riphah.edu.pk 10/01/2006 – 10/12/2008
Islamabad, Pakistan
IT FIELD ENGINEER BUSINESS COMPUTING INTERNATIONAL
• Develop network layouts and new data centers for multiple banks, ensuring seamless and reliable network operations.
• Provide network support and maintenance for secure and non-secure Ethernet networks, ensuring optimal network performance.
• Led up to 30 members to complete IT infrastructure and network implementation projects within budget and on time.
• Manage resources, provide guidance and support, and ensure effective communication among team members.
• Manage cable punching and rack management in all new data centers, ensuring efficient use of resources and optimal operations.
• Ensure proper structure and organization of all data centers and correctly label and manage all cables, minimizing downtime and
maximizing efficiency.
• Demonstrate leadership and management skills in network layout and development, network support services, and
• cable punching and rack management.
Projects at Banks:
• Network Layout at Dubai Islamic Bank Rawalpindi, Gujrat, and Mandi Baha-ud-Din.
• Network Layout at JS Bank Ltd Islamabad.
• Network Layout at American Express
• Network Layout at HSBC (RWP & ISB)
Business or Sector Professional, scientific and technical activities DepartmentCSD Website
EDUCATION AND TRAINING
20/04/2020 – 21/04/2021 Islamabad, Pakistan
Post Graduate Diploma in Information Technology (PGD-IT) Virtual
University Pakistan
10/04/2016 – 15/11/2018 Islamabad, Pakistan
MBA (Business Administration) MBA Riphah
International University
Website www.riphah.edu.pk
LANGUAGE SKILLS
• Mother tongue(s): URDU
• Other language(s): ENGLISH (IELTS Certified B2)
DIGITAL SKILLS
• Data Center Administration & Operations (Tier 3 compliant – Huawei)
• Network Design & Administration (LAN/WAN, VLAN, Routing & Switching, DMZ)
• Firewall & Security Management (Fortinet, Cisco, Sophos – including VPNs, IPS, WAF)
• ISO 27001 & SOC 2 Compliance Auditing
• Disaster Recovery & Business Continuity Planning
• Windows Server & Active Directory Administration
• G Suite & Office 365 Administration
• Application & Internet Access Management (Sangfor, MS Teams, etc.)
• Virtualization Platforms (VMware ESXi, Hyper-V)
• Monitoring & Reporting Tools (NMS, Power BI, Compliance Dashboards)
• Access Control, UPS & Fire Alarm Systems (Data Center Infrastructure)
• IT Asset Management & Helpdesk System Deployment
• Project Management & Service Optimization
• IT Procurement, Budgeting & Vendor Negotiation
• Policy Documentation & Risk Assessments (ISO 27001, SOC 2, GDPR)
• Compliance Automation Tools (Vanta, Drata, Secureframe)
• Audit Facilitation & Control Gap Analysis
• Client-Facing Communication & Stakeholder Engagement
• People Leadership & Technical Recruitment
• Security Awareness & Training Delivery
Trainings & Certifications
• ISMS Lead Auditor (ISO 27001)
• Advanced ITSM with ServiceNow: Optimizing IT
• FortiGate Administrator (Fortinet)
• FortiManager Administrator (Fortinet)
• Enterprise Firewall Administrator (Fortinet)
• FortiAnalhzer Administrator (Fortinet)
https://bci.net.pk/
• Network Security Support Engineer (Fortinet)
• Fortinet Network Security
• CGRC - Governance, Risk and Compliance Certification Mastery
• Cybersecurity Compliance Framework, Standards & Regulations (IBM)
• Data Center Security Management with Microsoft System Center (EDUCBA)
• CISSP: Certified Information Systems Security Professional
• CISM: Certified Information Security Manager
• Computer Network & Network Security Management (IBM)
• CISA: Certified Information Systems Auditor Specialization
• Governance and IT Management
• Google Cloud: Preparing for Your Professional Cloud Security Engineer Journey
• PMP (PMI Lahore)
• HCIE (Huawei Certified Internetwork Expert)
• HCIP (Data Center Facility Deployment)
• Huawei Cloud Computing
• Azure Cloud
• Characterization of Personality
• MCSA (Microsoft Solution Certified Associate
• MCP (Microsoft Certified Professional)
• MS (Microsoft Specialist)
• MCSE (Microsoft Certified System)
• CCNA
• CCNP
Hobbies
• Playing Cricket
• Watching Movies
• Hiking
• River Rafting
F
