shaid hussain

About Me

I work as an Information Security and GRC consultant at ADL Consulting, running ISO 27001 and 42001 programmes for SMEs, research organisations and defence supply chain clients. Scoping through to certification: risk assessment, SoA, control implementation, internal audit and CAPA.

I came into governance after nearly five years writing production code, which shapes how I work. I test whether a control is technically viable before it reaches the Statement of Applicability, and I would rather ship something an engineering team will actually adopt than a policy that looks good in an audit and gets ignored in practice.

Happy to talk audits, supplier assurance, or where AI governance is heading.

Experience Highlights

• ISO/IEC 27001:2022 ISMS delivery across seven concurrent clients
• PECB certified ISO/IEC 27001 Lead Auditor
• Led a full internal audit programme across eight departments
• Mapped 85 SoA controls to 76 live risk entries with a traceable evidence chain
• Reviewed 110 NIST SP 800-171 controls and built the CMMC readiness roadmap
• Own supplier due diligence and third party risk across the portfolio
• Helped build a supplier risk platform, shaping the security model and writing the code
• Nearly five years as a software engineer before moving into governance

Get in Touch

DM me on Linkedin