Luqman Haniff
An IT security practitioner with extensive in depth technical knowledge. With more than a decade of combined education and experience in Information Security Management, Haniff has had various experiences advising SMEs on IT and information security as well as managing IT infrastructure.
With an eye to detail, Haniff is a meticulous problem solver, and prefers to simultaneously take both a macro and micro approach to organisational issues. This balanced approach has often proved valuable in tackling difficult situations where a customised and targeted solution is needed as compared to a generic off the shelf alternative. Even so, Haniff is not adverse to taking the simpler and more cost effective solution in situations that call for it, with balance again as a key guide.
Function and Specialisation
- Governance, Risk and Compliance
- IT Security Management
- ISMS Consulting
- Vulnerability Assessment & Penetration Testing
- Security Architecture and Design
Certifications
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- Certified in Governance, Risk and Compliance (CGRC)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Controls (CRISC)
- Certified in Governance for Enterprise IT (CGEIT)
- Certified Data Privacy Solutions Engineer (CDPSE)
- Advanced in AI Audit™ (AAIA)™
- Advanced in AI Security Management™ (AAISM™)
- Advanced in AI Risk™ (AAIR™)
- Organisational Systems Security Analyst (OSSA)
- Organisational Systems Wireless Auditor (OSWA)
- Organisational Systems Web Application Pentester (OSWAP)
- Security+
- ITIL®4 Foundation
- ISO/IEC 20000 Practitioner
- ISO/IEC 20000 Auditor
- Advanced Certificate in Learning and Performance (ACLP)
- Advanced Certificate in Data Protection Operational Excellence
Education
Singapore Institute of Technology
B.Eng in Information and Communication Technology (Information Security)
Singapore Management University
Advanced Certificate in Data Protection Operational Excellence
Singapore Polytechnic
Dip. Infocomm Security Management
Professional Experience
- Consultant
Sapience Consulting
2022 – Present
Consulting services for various clients from different sectors. Conducts training classes in IT Security Management, Risk Management and Cloud Security. - IT Manager / Data Protection Officer
Ohm Energy Pte Ltd
2019 – 2022
Oversaw Ohm Energy’s data protection management programme as DPO. Ohm Energy was awarded the DPTM certification by IMDA on 5th November 2021.
Performed vulnerability assessments for Ohm’s IT infrastructure and implemented countermeasures for Ohm’s internal systems. Coordinated and managed third-party IT vendor projects for Ohm’s systems. Assisted in daily operations, reviewed daily transactions and generated data reports.
- Associate Consultant
PulseSecure Pte Ltd
2018 – 2018
Conducted web-based penetration testing for various clients. - IT Engineer
SP Management Consultant
2007 – 2008, 2012 – 2014
Deployed and maintained various internal IT infrastructure and systems. Managed a domain based networked computer environment in Hong Kah North Community Club. Awarded a contract to upgrade and provide a maintenance free solution for the CC’s eClub computers.
- Intern
D-Link International Pte Ltd
2010 – 2010
Developed a program to automate the running of network product testing tools using Autohotkey. Assisted in the running and management of a tradeshow booth at an IT fair.