Maruf

Chief Information Security Officer (CISO)

INFORMATIX SYSTEMS • Temps plein

Apr 2018 - Present • 8 yrs 1 mo

Leads the end-to-end cybersecurity, cloud architecture, and digital risk governance strategy across enterprise infrastructure. Aligns security initiatives with business goals, delivering resilient, scalable, and compliant solutions that protect critical data, infrastructure, and client trust in a high-growth, multi-tenant environment. 🔹 Strategic Leadership & Architecture • Architected a comprehensive cybersecurity framework integrating Zero Trust, Defense-in-Depth, and regulatory compliance aligned with ISO 27001 and Bangladesh CIB regulations. • Implemented company-wide security governance, access control policies, and role-based privilege systems to reduce insider risks. • Hardened CI/CD pipelines, ensured infrastructure-as-code security, and maintained secure version control across hybrid cloud environments. 🔹 Cloud & Infrastructure Security • Engineered secure, high-availability systems using CloudLinux, Imunify360, CSF, ModSecurity, and Cloudflare edge services to mitigate DDoS, botnet, and zero-day threats. • Integrated Redis Enterprise and LiteSpeed caching for high-performance web delivery under peak concurrency. • Secured Docker and Kubernetes environments, ensuring runtime compliance and vulnerability-free containers. 🔹 Threat Intelligence & Compliance • Conducted proactive penetration testing, vulnerability assessments, and infrastructure-wide threat hunting. • Enforced compliance with Bangladesh digital finance policies, including protection of PII and adherence to CIB guidelines. • Managed encryption-at-rest protocols, data governance standards, and disaster recovery aligned to RTO/RPO targets. 🔹 Business Enablement & Advisory • Provided executive-level security insights and incident preparedness strategies. • Supported secure client onboarding for SaaS, eCommerce, and cloud-native platforms. • Promoted a security-first culture through training, awareness, and ongoing risk management.