Available for Entry-Level GRC & Security Roles

Governance, Risk & Compliance
Governance . Risk . Operations

Bridging the gap between technical security operations, policy compliance, and executive business risk decision-making.

The Blueprint

A 4th-year Computer Technology student specializing in Information Security at Syrian Virtual University (SVU), pursuing an entry-level track in Governance, Risk, and Compliance (GRC) and Security Operations.

I combine solid knowledge of security management frameworks (CISSP track) and risk assessment with practical technical expertise in system hardening, security automation (Python), and compliance visualization, driven to bridge the gap between technical operations and business risk decision-making.

Technical Weapons Arsenal

Governance, Risk & Compliance

Framework alignment, policy mapping, and operational risk assessment.

  • Information Security Governance
  • Risk Assessment & Mitigation
  • Due Care & Due Diligence Principles
  • Security Policy & Framework Mapping
  • Security Control Evaluation & Auditing

Security Operations & Hardening

Proactive endpoint defense and operational risk reduction.

  • System & Endpoint Hardening
  • Endpoint Detection & Response (EDR) Concepts
  • Behavioral Anomaly Analysis
  • Compensating Controls Implementation
  • Incident Visibility & Monitoring

Compliance & Automation Tooling

Defensive scripting and compliance analytics platforms.

  • Automated Security Scripting (Python)
  • Building Compliance Analytics Systems
  • LLM & Vector Embeddings for Security Frameworks
  • Operational Threat Mitigation Logic

Web & Dashboard UI/UX

Designing security dashboards for actionable executive visibility.

  • Glassmorphic Security Console Interfaces
  • HTML5, CSS3 Architecture & ES6+ JavaScript
  • Incident Management Dashboard Design
  • Actionable Compliance & Risk Reporting Visuals

Production Repositories

03.1 System Hardening & GRC Tool

Sentinel — System Hardening & Operational Risk Mitigation Tool

Developed a Windows system integrity tool implementing automated threat mitigation and compensating controls for operational risk reduction.

Implemented automated threat mitigation logic capable of real-time parsing and programmatically terminating malicious processes (PIDs).
Developed behavior-monitoring modules to detect anomalies in system telemetry, CPU/GPU peaks, and sudden network socket shifts.
Designed intuitive terminal outputs to provide operational threat visibility and audit-ready telemetry reporting.
03.2 Compliance Analytics Platform

NorthHawk AI — Security & Compliance Analytics Dashboard

Designed and developed a premium, high-performance cybersecurity AI dashboard that integrates Large Language Models (LLMs) and Vector Embeddings to analyze complex compliance frameworks (e.g., CISSP, COSO).

Implemented semantic search and text embedding models using Google GenAI SDK for precise cybersecurity and compliance querying.
Engineered an advanced, fluid Glassmorphic layout featuring a real-time tactical terminal interface for seamless data ingestion and incident management.
Optimized user experience with multi-state dropdown configurations and fluid container states for executive decision-making visibility.
03.3 GRC & Security Interfaces

Interactive Security Operations Dashboards

A suite of specialized user interfaces engineered to transform complex security logs, risk metrics, and compliance controls into clean, actionable executive dashboards.

Developed clean, deployable Front-End code (HTML5/CSS3) focused on modern aesthetics and high-performance layout fluidity.
Applied visual art and user flow principles to optimize system audit visibility and security status management.

Academic & Professional Timeline

4th Year Student // Current

Computer Technology — Information Security

Syrian Virtual University (SVU)

Professional Certification Tracker

CISSP Management Track

Focusing heavily on Security Engineering, Security Management, Security Operations, and Identity & Access Management (IAM).

Defensive Security Track

Certified Ethical Hacker (CEH) Framework

Focusing on threat assessment methodologies, vulnerability mitigation, and proactive security evaluation.