Luqman Haniff
Luqman Haniff
An IT security practitioner with extensive in depth technical knowledge. With more than a decade of combined education and experience in Information Security Management, Haniff has had various experiences advising SMEs on IT and information security as well as managing IT infrastructure.
With an eye to detail, Haniff is a meticulous problem solver, and prefers to simultaneously take both a macro and micro approach to organisational issues. This balanced approach has often proved valuable in tackling difficult situations where a customised and targeted solution is needed as compared to a generic off the shelf alternative. Even so, Haniff is not adverse to taking the simpler and more cost effective solution in situations that call for it, with balance again as a key guide.
Function and Specialisation
- Governance, Risk and Compliance
- IT Security Management
- ISMS Consulting
- Vulnerability Assessment & Penetration Testing
- Security Architecture and Design
Certifications
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- Certified in Governance, Risk and Compliance (CGRC)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Controls (CRISC)
- Certified in Governance for Enterprise IT (CGEIT)
- Certified Data Privacy Solutions Engineer (CDPSE)
- Advanced in AI Audit™ (AAIA)™
- Advanced in AI Security Management™ (AAISM™)
- Advanced in AI Risk™ (AAIR™)
- Organisational Systems Security Analyst (OSSA)
- Organisational Systems Wireless Auditor (OSWA)
- Organisational Systems Web Application Pentester (OSWAP)
- Security+
- ITIL®4 Foundation
- ISO/IEC 20000 Practitioner
- ISO/IEC 20000 Auditor
- Advanced Certificate in Learning and Performance (ACLP)
- Advanced Certificate in Data Protection Operational Excellence
Education
Singapore Institute of Technology
B.Eng in Information and Communication Technology (Information Security)
Singapore Management University
Advanced Certificate in Data Protection Operational Excellence
Singapore Polytechnic
Dip. Infocomm Security Management
Professional Experience
- Consultant
Sapience Consulting
2022 – Present
Consulting services for various clients from different sectors. Conducts training classes in IT Security Management, Risk Management and Cloud Security. - IT Manager / Data Protection Officer
Ohm Energy Pte Ltd
2019 – 2022
Oversaw Ohm Energy’s data protection management programme as DPO. Ohm Energy was awarded the DPTM certification by IMDA on 5th November 2021.
Performed vulnerability assessments for Ohm’s IT infrastructure and implemented countermeasures for Ohm’s internal systems. Coordinated and managed third-party IT vendor projects for Ohm’s systems. Assisted in daily operations, reviewed daily transactions and generated data reports.
- Associate Consultant
PulseSecure Pte Ltd
2018 – 2018
Conducted web-based penetration testing for various clients. - IT Engineer
SP Management Consultant
2007 – 2008, 2012 – 2014
Deployed and maintained various internal IT infrastructure and systems. Managed a domain based networked computer environment in Hong Kah North Community Club. Awarded a contract to upgrade and provide a maintenance free solution for the CC’s eClub computers.
- Intern
D-Link International Pte Ltd
2010 – 2010
Developed a program to automate the running of network product testing tools using Autohotkey. Assisted in the running and management of a tradeshow booth at an IT fair.
I have attended AAISM course. The length of the course is just right for me. The environment is conducive for learning and Trainer Haniff is helpful, friendly and uses real world example to explain certain concepts.
WX Lim
Well-crafted and insightful session on AAIA Certification! A great familiarisation with the certification process, key competencies, and professional pathways it opens up in the AI and auditing space. Appreciate the effort and clarity in delivering the overview, enriching and relevant for today’s evolving compliance and governance landscape.
Arun Kumar
Attended a 4-day CISM preparation course last week and it was a great experience overall. I’d be happy to take the rest of my ISACA courses with them.
Our instructor (Haniff) was a terrific teacher and guided us through the heavy content very well. Special thanks to Veronica too for assisting me with all the pre-course stuff!
Samuel Ngiam
I recently completed the CRISC course led by Instructor Haniff and was thoroughly impressed. The pacing of the course was well-balanced, allowing ample time to grasp each concept without feeling rushed. Haniff demonstrated strong expertise and delivered the material clearly, making complex topics easy to understand. The slides were well-structured and complemented the lectures effectively, serving as a great reference throughout the course. Highly recommended for anyone preparing for the CRISC certification.
Hemrish
- Governance, Risk and Compliance
- IT Security Management
- ISMS Consulting
- Vulnerability Assessment & Penetration Testing
- Security Architecture and Design
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- Certified in Governance, Risk and Compliance (CGRC)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Controls (CRISC)
- Certified in Governance for Enterprise IT (CGEIT)
- Certified Data Privacy Solutions Engineer (CDPSE)
- Advanced in AI Audit™ (AAIA)™
- Advanced in AI Security Management™ (AAISM™)
- Advanced in AI Risk™ (AAIR™)
- Organisational Systems Security Analyst (OSSA)
- Organisational Systems Wireless Auditor (OSWA)
- Organisational Systems Web Application Pentester (OSWAP)
- Security+
- ITIL®4 Foundation
- ISO/IEC 20000 Practitioner
- ISO/IEC 20000 Auditor
- Advanced Certificate in Learning and Performance (ACLP)
- Advanced Certificate in Data Protection Operational Excellence
Consultant
Sapience Consulting
2022 – Present
Consulting services for various clients from different sectors. Conducts training classes in IT Security Management, Risk Management and Cloud Security.
IT Manager / Data Protection Officer
Ohm Energy Pte Ltd
2019 – 2022
Oversaw Ohm Energy’s data protection management programme as DPO. Ohm Energy was awarded the DPTM certification by IMDA on 5th November 2021.
Performed vulnerability assessments for Ohm’s IT infrastructure and implemented countermeasures for Ohm’s internal systems. Coordinated and managed third-party IT vendor projects for Ohm’s systems. Assisted in daily operations, reviewed daily transactions and generated data reports.
Associate Consultant
PulseSecure Pte Ltd
2018 – 2018
Conducted web-based penetration testing for various clients.
IT Engineer
SP Management Consultant
2007 – 2008, 2012 – 2014
Deployed and maintained various internal IT infrastructure and systems. Managed a domain based networked computer environment in Hong Kah North Community Club. Awarded a contract to upgrade and provide a maintenance free solution for the CC’s eClub computers.
Intern
D-Link International Pte Ltd
2010 – 2010
Developed a program to automate the running of network product testing tools using Autohotkey. Assisted in the running and management of a tradeshow booth at an IT fair.
Singapore Institute of Technology
B.Eng in Information and Communication Technology (Information Security)
Singapore Management University
Advanced Certificate in Data Protection Operational Excellence
Singapore Polytechnic
Dip. Infocomm Security Management