Expertise Credentials Projects Blog Collaborate Contact Get in Touch ↗

Digital Security
& Governance, Risk Professional.

Turning complex regulatory risk into competitive advantage for organisations that can't afford to fail. 13+ years building enterprise-grade GRC frameworks across banking, manufacturing and education.

Hire Me ↗ Collaborate Download CV
Md Fahmid Wasif
Available
Md Fahmid Wasif
Digital Security & GRC Professional
MPS, First Class Honours — University of Auckland
13+
Years GRC Experience
4
Organisations guided to ISO certification
GRC ISO 27001 AI Governance BCP/DR Auckland, NZ
Auckland, New Zealand
40+
Regulatory audits led
85%
RTO reduction achieved
$500K
Annual downtime prevented
99%
CMDB accuracy (from 75%)
60%
Audit observations reduced YoY
Core Expertise

What I bring to your
organisation.

Governance & Compliance
ISO 27001/27701/42001, PCI DSS, NIST CSF, ITIL v3/v4. Sustained 100% satisfactory compliance rating across 40+ regulatory reviews at a major commercial bank.
Enterprise Risk Management
Built IT Risk Frameworks identifying 25+ enterprise risks. KRI monitoring prevented 12 critical incidents annually — saving $500K+ in downtime costs.
Business Continuity & DR
Architected BCP protecting $2B+ in assets. Reduced RTO from 5 hours to 45 minutes. 95% success rate across 60+ critical application DR tests.
AI Governance
ISO/IEC 42001 Lead Auditor — formal AI governance credentials. Integrating AI risk into GRC frameworks aligned with OECD & G7 AI Principles.
IT Service Management
Led ManageEngine ITSM for 9,500+ employees. Reduced ticket resolution by 35%, improved user satisfaction from 3.2 to 4.5/5.
Cloud & Infrastructure Security
Azure Administrator, Oracle Cloud AI & Data Science Professional. Cloud governance with 99.7% uptime SLAs across multi-facility networks.
ISO/IEC 42001 ISO/IEC 27001 ISO/IEC 27701 ISO 20000 ISO 9001 NIST CSF PCI DSS ITIL v3/v4 ServiceNow ManageEngine Microsoft Azure Oracle Cloud Fortinet NSE4 CMDB BCP/DR Design Risk Register Vulnerability Assessment Active Directory Microsoft 365
Credentials

Certified across
security & governance.

ISO/IEC 42001 Lead Auditor
AI Management System · Mastermind
ISO/IEC 27001 Lead Auditor
Information Security Management · Mastermind
ISO/IEC 27701 Lead Auditor
Privacy Information Management · Mastermind
Certified Ethical Hacker (CEH)
EC-Council
Certified in Cybersecurity (CC)
ISC²
OCI 2025 Generative AI Professional
Oracle Cloud Infrastructure
OCI 2023 Data Science Professional
Oracle Cloud Infrastructure
Azure Administrator Associate
Microsoft Certified
NSE 4 Network Security Professional
Fortinet
MPS — Digital Security · First Class Honours
University of Auckland · 2026
Professional Affiliations
Member — ISACA · Member — Institute of Internal Auditors New Zealand
Flagship Project

The platform I built
to prove the thinking.

IRGS Core
Integrated Risk & Governance Suite
A self-hosted GRC platform prototype for financial services: 8 governance modules, 5 quantitative risk engines including a Monte-Carlo FAIR simulator, and a live event-driven architecture — all running on local AI with zero external data egress.
Python FastAPI Next.js TypeScript PostgreSQL Redis Docker Local AI
Explore the project →
8 / 8
Governance modules live
272 / 276
Spec features implemented (99%)
134
REST API endpoints
46
Database models
56
Passing unit tests
Zero
External AI calls
Latest Writing

Insights on security,
governance & AI.

Business Continuity
Cutting RTO from 5 Hours to 45 Minutes: What the Textbooks Don't Tell You
Fewer One in three organisations can recover from even a small crisis within a week. Here is how Bank DR redesign cut recovery time by 85% across 187 branches and what actually drove the improvement.
Jun 5, 2026 Read more →
AI Governance
What I Learned Building an Enterprise AI Governance Framework from Scratch
In 2023, AI tools were live at a leading Bank with no place in the risk register. Here is what eighteen months of building an enterprise AI governance programme from nothing actually taught me.
Jun 1, 2026 Read more →
GRC
How to Cut Critical Audit Observations by 60%
Only 29% of organisations say their compliance programmes consistently meet standards. Over three years and 20+ audits at Bank, we reduced critical observations by 60% YoY.
May 23, 2026 Read more →
GRC
Building IT Governance from the Ground Up — Before the AI Frontier Builds It for You
Why IT governance is now a survival issue for NZ SMEs — not a corporate luxury Which NZ laws and frameworks apply to you right now A practical 90-day starting plan you can act on immediately
May 10, 2026 Read more →
View All Articles ↗
How I Can Help

For employers &
collaborators alike.

For Employers Worldwide
Seeking a senior GRC, IT Governance, or Digital Security role with forward-thinking organisations globally.
  • Head of GRC / IT Risk & Compliance
  • Chief Information Security Officer (CISO)
  • Senior Information Security Manager
  • IT Governance Lead / Director
  • Cybersecurity Governance Specialist
  • Business Continuity & DR Manager
  • AI Governance & Risk Advisor
  • Digital Risk & Regulatory Consultant
  • Data Governance Program Lead
  • Enterprise Risk Manager
Contact Me ↗
Collaborative Projects
Open to research, consulting, and academic collaboration in AI-powered governance and security.
  • AI Agents for GRC & Compliance Automation
  • AI-powered Audit Intelligence & Risk Detection
  • AI Governance Framework Design (ISO 42001)
  • Automated Security Policy Generation & Review
  • AI-driven Vulnerability Assessment Tools
  • Cybersecurity policy development & research
  • Digital security academic papers & publications
  • Startup / SME security advisory & mentoring
Let's Collaborate ↗
Get in Touch

Ready to make
governance work for you.

Whether you're hiring for a senior GRC role, exploring a research partnership, or need advisory expertise — I'd love to hear from you.

me@fahmid-wasif.info
Primary — best for professional enquiries
+64 27 522 9870
Auckland, New Zealand
 in
www.linkedin.com/in/md-fahmid-wasif/
Connect professionally
Currently Available
Based in Auckland, NZ with full work rights. Open to full-time permanent roles, contract engagements, and collaborative project work globally. Also available for remote engagements.

Completed a Master of Professional Studies in Digital Security with First Class Honours at the University of Auckland (2026).
Education
MPS — Digital Security · First Class Honours
University of Auckland · 2025 – 2026
MBA — Finance
BRAC University · 2014 – 2016
BSc — Electrical & Electronic Engineering
BRAC University · 2008 – 2012