Skip to content
View Nouman-J-Nizami's full-sized avatar
28 followers · 21 following

Block or report Nouman-J-Nizami

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Nouman-J-Nizami/README.md

Hi, I'm Nouman Nizami 👋

Cybersecurity Analyst | GRC & Compliance | ISO 27001 · NIS2 · Risk Management

I combine an industrial engineering background with hands-on cybersecurity expertise, focusing on Governance, Risk & Compliance, security operations, and regulatory frameworks.

🔍 Focus Areas

  • Governance, Risk & Compliance (GRC)
  • ISO 27001 & NIS2 implementation
  • Risk Assessment & Security Controls
  • Security Operations & Incident Response
  • Vulnerability Assessment & Penetration Testing basics

🛠️ Tools & Technologies

Splunk Wazuh SIEM Nmap Nessus Metasploit Wireshark Kali Linux

📜 Certifications

  • CompTIA Security+ (SY0-701)
  • ISO 27001 Lead Implementer (in progress)
  • Cybersecurity Analyst – Professional Training Program, EPICODE Institute of Technology

📌 Featured Projects

Check out my pinned repositories below — covering ISO 27001 risk assessment, threat intelligence aligned with MITRE ATT&CK, incident response with Wazuh SIEM, and vulnerability assessment reporting.

📫 Let's Connect

LinkedIn · Based in Upper Austria, Austria

Pinned Loading

  1. ISO27001_Cloud_Migration_Risk_Assessment ISO27001_Cloud_Migration_Risk_Assessment Public

    Governance, Risk and Compliance case study covering risk assessment, treatment planning, control mapping and cloud security governance. compliance, cloud security and risk management.

  2. ISO27031-Business-Continuity-and-Disaster-Recovery ISO27031-Business-Continuity-and-Disaster-Recovery Public

    Business Continuity, Disaster Recovery and ICT Readiness analysis based on ISO/IEC 27031.

  3. Cyber-Risk-Threat-Assessment-Report-Aligned-with-ThreatConnect-OWASP-Top-10-and-MITRE-ATT-CK Cyber-Risk-Threat-Assessment-Report-Aligned-with-ThreatConnect-OWASP-Top-10-and-MITRE-ATT-CK Public

    Cyber risk and threat assessment project aligned with MITRE ATT&CK, OWASP Top 10, ISO 27001, NIST, and Threat Intelligence methodologies.

    1

  4. Vulnerability-Assessment-and-Security-Analysis-Report Vulnerability-Assessment-and-Security-Analysis-Report Public

    Security assessment project focused on vulnerability identification, risk analysis, remediation planning, and security posture improvement.

  5. Cybersecurity_Incident_Response_SOC_CSIRT_Wazuh_SIEM_Lab_Report Cybersecurity_Incident_Response_SOC_CSIRT_Wazuh_SIEM_Lab_Report Public

    Incident response and SOC operations project using Wazuh SIEM/XDR for threat detection, investigation, alert analysis, and security monitoring.

    1

  6. Social-Engineering-Laboratory-Report-Phishing-Simulation-and-Credential-Harvesting Social-Engineering-Laboratory-Report-Phishing-Simulation-and-Credential-Harvesting Public

    Social Engineering awareness and phishing simulation project using SET (Social Engineering Toolkit) to analyze credential harvesting techniques and improve security awareness.

    1