Mohd Kaif Idrisi

Expertise: 

• ISO 27001:2022 Implementation & Internal Auditing 

• Cybersecurity & Compliance Audits 

• Risk Assessment & Risk Treatment 

• Third-Party Risk Management (TPRM) 

• NCA ECC & Cybersecurity Compliance 

• Qatar NIA & Cybersecurity Compliance 

Summary: 

Mohd Kaif Idrisi is a cybersecurity and GRC professional with experience in information security governance, risk management, compliance, and internal and external audits. He is a Certified ISO 27001:2022 Lead Auditor with experience across ISO 27001, ISO 9001, ISO 27035, SOC 2 Type II, Saudi NCA ECC, Qatar NIA, GDPR, DPDP, and PDPA.  

He has experience managing compliance programs, conducting risk and control assessments, developing and reviewing policies and procedures, managing audit evidence, tracking remediation, and supporting certification maintenance. He also manages external audit and compliance activities for Saudi NCA ECC and Qatar NIA, including stakeholder coordination, control mapping, evidence validation, and audit readiness. 

His experience also includes Third-Party Risk Management, User Access Reviews, RBAC, IT Asset Reviews, ISMS documentation, security awareness, and risk treatment, with a focus on maintaining compliance and driving continual improvement. 

Professional Experience: 

Internal Audit Associate | Eventus Security | February 2026 - Present 

• Manage compliance across ISO 27001, ISO 9001, ISO 27035, SOC 2 Type II, Saudi NCA ECC, Qatar NIA, GDPR. 

• Manage Saudi NCA ECC and Qatar NIA external audits, including control mapping, evidence validation, stakeholder coordination, and remediation tracking. 

• Conduct risk and compliance assessments and monitor compliance of infrastructure, cloud, software, and organizational processes. 

• Develop and maintain policies, procedures, controls, and compliance documentation. 

• Support certification maintenance, internal audits, security awareness, vendor compliance, and audit readiness.

Hitachi Payment Services Pvt. Ltd. | Jr. Analyst – GRC | June 2024 - January 2026 

• Supported ISO 27001:2022 implementation, risk assessment, SoA, internal audits, and ISMS documentation. 

• Conducted User Access, RBAC, and IT Asset Reviews. 

• Managed Third-Party Risk Management, including vendor assessments, security questionnaires, evidence review, and risk tracking. 

• Supported external audits, security awareness, evidence collection, and remediation tracking. 

Certifications: 

• ISO 27001:2022 Lead Auditor – CQI IRCA 

• Certified Ethical Hacker (CEH)