\documentclass[letterpaper]{article}
\usepackage[margin=0.4in,top=0.3in,bottom=0.25in]{geometry}
\usepackage{enumitem}
\usepackage{titlesec}
\usepackage[hidelinks]{hyperref}
\usepackage[T1]{fontenc}
\usepackage[scaled]{helvet}
\usepackage{xcolor}
\usepackage{microtype}

% Clean sans-serif type scale
\renewcommand{\familydefault}{\sfdefault}
\renewcommand{\normalsize}{\fontsize{9.5}{11.4}\selectfont}
\renewcommand{\large}{\fontsize{11.5}{12.6}\selectfont}
\renewcommand{\Large}{\fontsize{16}{17.4}\selectfont}
\renewcommand{\small}{\fontsize{8.8}{9.6}\selectfont}
\normalsize

\pagestyle{empty}
\setlength{\parindent}{0pt}
\setlength{\parskip}{0pt}

\titleformat{\section}{\fontsize{11}{12}\selectfont\bfseries\uppercase}{}{0em}{}
\titlespacing*{\section}{0pt}{6pt}{4pt}

% Bullet rhythm and hanging indent
\setlist[itemize]{nosep,leftmargin=0.3in,labelsep=0.08in,label=\textbullet,topsep=1pt,parsep=0pt,partopsep=0pt,itemsep=3pt,before={\parfillskip=0pt plus .2\textwidth},after={\parfillskip=0pt plus 1fil}}

% Job entry helper
\newcommand{\jobentry}[3]{%
  \textbf{#1}, #2 \hfill \textbf{#3}\par
}

\begin{document}

\begin{center}
  {\Large\bfseries Ashar S. Ahmed}\\[2pt]
  Cyber Security \& Compliance Analyst \textbar\ U.S. Citizen \textbar\ \href{mailto:ashar@aahmed.org}{ashar@aahmed.org} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\end{center}

\vspace{3pt}

\section{Summary}
Cyber security analyst with 3+ years developing and maintaining security policies, performing risk assessments, audits, and compliance reviews aligned to ISO 27001 and NIST. Experienced authoring AI governance frameworks (ISO 42001 / NIST AI RMF-aligned), completing client and vendor security questionnaires, delivering compliance training, and performing significant SIEM log analysis. Strong written and interpersonal communication; translates technical risk into business language for leadership. Holds a CISSP and an M.S. in Cybersecurity.

\section{Technical Skills}
\textbf{Frameworks / Compliance:} ISO 27001, ISO 42001 (AI management systems), NIST CSF, NIST AI RMF, CIS Controls v8; regulatory compliance, policy \& standards development\\
\textbf{GRC Operations:} Risk assessments, internal audits, compliance reviews, audit evidence, client/vendor security questionnaires, third-party risk, remediation SLA tracking\\
\textbf{AI / ML Governance:} AI acceptable-use policy, LLM risk assessment, AI-driven compliance gap identification, GRC monitoring, policy-violation detection, shadow-AI\\
\textbf{Security Operations:} SIEM log analysis \& correlation (Wazuh), detection engineering, incident response, MITRE ATT\&CK\\
\textbf{Cloud / Tooling:} AWS (IAM, CloudTrail, GuardDuty, Config), policy-as-code (Checkov), Python / PowerShell / Bash automation\\
\textbf{Training \& Reporting:} Security awareness training, KPI dashboards, leadership reporting, documentation (policies, procedures, runbooks)

\section{Professional Experience}

\jobentry{Cyber Security Advisor}{Dr.\ Shariq Mumtaz Medicine Professional Corporation}{Jan.\ 2023 -- Present}
\begin{itemize}
  \item Developed, implemented, and maintained security policies, procedures, and standards aligned to ISO 27001 / NIST CSF for a regulated environment
  \item Performed risk assessments, compliance reviews, and remediation tracking; maintained organized audit evidence and documentation for assessments
  \item Established an \textbf{AI acceptable-use policy and governance framework} (aligned to ISO 42001 / NIST AI RMF); assessed generative-AI tools for compliance, privacy, and data-handling risk
  \item Built SIEM log-analysis pipelines (Wazuh) correlating identity, endpoint, and network telemetry across a distributed fleet; cut Mean Time to Detect from days to under \textbf{1 hour}
  \item Organized and delivered security awareness training; monitored participation and reported results and KPIs to leadership with follow-up on non-compliance
  \item Completed client and vendor security questionnaires drawing on documented precedent for accuracy and consistency; managed third-party risk assessments
\end{itemize}

\vspace{4pt}
\jobentry{Software Developer (DevSecOps)}{Department of Industry, Canadian Digital Service}{Feb.\ 2021 -- Jan.\ 2022}
\begin{itemize}
  \item Enforced security controls as code (Checkov) across all Terraform/Terragrunt modules provisioning auditable AWS infrastructure (IAM, CloudTrail, S3)
  \item Implemented CI/CD quality and compliance gates, raising code coverage from \textasciitilde20\% to \textbf{85\%} and cutting client-reported data incidents from 4--5 to 1--2 per cycle
  \item Awarded the \textbf{Directors' General Award of Merit} for delivery impact on national spectrum operations
\end{itemize}

\vspace{4pt}
\jobentry{Technical Contractor (AI Safety \& Evaluation)}{Mercor Intelligence, San Francisco, CA}{May 2026 -- Present}
\begin{itemize}
  \item Evaluate large language model outputs and failure modes for a frontier AI lab, including adversarial and misuse scenarios --- directly informs AI risk assessment and governance practice
\end{itemize}

\section{Projects}

\textbf{Security Homelab \& Detection Lab} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\begin{itemize}
  \item Operate a self-built SIEM/SOC lab with significant log-analysis workload: Wazuh detection engineering (custom decoders/rules), automated response, and Zero Trust (SP 800-207) segmentation
  \item Mapped technical controls to NIST CSF and CIS Controls v8 with full documentation; instrumented observability (Prometheus, Grafana, Loki) and self-healing automation
\end{itemize}

\section{Education}

\textbf{Master of Science (M.S.) Cybersecurity \& Information Assurance} \textbar\ Western Governors University \hfill Awarded 2024\\
\textbf{Bachelor of Computer Science (BCompSci)} \textbar\ Dalhousie University \hfill Awarded 2024

\section{Certifications}
Certified Information Systems Security Professional (CISSP) \hfill Awarded 2026\\
Systems Security Certified Professional (SSCP) \hfill Awarded 2023\\
AWS Certified Solutions Architect \& Developer - Associate \hfill Awarded 2022

\end{document}
