Digital Curriculum Vitae

Hi, I’m Anissa.

4 years Experience in the Cyber Security industry as a TPRM specialist, GRC support with strong areas in PCI-DSS & Vulnerability Management.

I am currently not open to work, full time employed View Projects
Email anissasiari@outlook.com 

      

    


    

      

        
Experience

        
Professional History

      


      

        

          
Cyber Risk Analyst

          
Manchester Airport Group • 2022-Present

          
    
            
  •  Own and manage the Third-Party Risk Management (TPRM) programme across MAN, EMA, STN, and CAVU.
    • 
            
  •  Lead supplier due diligence and third party risk assessments.
    • 
            
  •  Assess vendor security controls and recommend risk treatment actions.
    • 
            
  •  PCI-DSS Implementer & cross-functional support
    • 
            
  •  Audit & Compliance support
    • 
            
  •  Leverage Adaptive Shield to enhance SaaS security and reduce risk
    • 
            
  • Drive continuous improvement in third-party risk, cybersecurity compliance, and organisational resilience. 
    •  
          

        


        

          
Graduate Cyber Security Analyst

          
General Medical Council • 2022-2023

          
    
          
  • Managed and optimised endpoint security controls using Sophos
    • 
          
  • Administered phishing simulation campaigns and security awareness reporting through Proofpoint
    • 
          
  • Managed internal and third-party Active Directory accounts, access controls, and MFA compliance
    • 
          
  • Oversaw JLM, ensuring timely access revocation
    • 
          
  • Designed and assessed Third-Party Risk Management (TPRM) questionnaires to evaluate supplier cyber risk
    • 
          
  • Produced monthly vulnerability management reporting using Rapid7
    • 
          
  • Developed cybersecurity reports, dashboards, metrics, and Standard Operating Procedures (SOPs)
    • 
          
  • Monitored emerging cyber threats and vulnerabilities, translating intelligence into proactive risk mitigation measures
    • 
          

        


        

          
Project Management & Technical Delivery Intern

          
VMWARE • 2020-2021

          
    
          
  • Managed a diverse portfolio of projects across the NEMEA region (UK & Ireland, Nordics, and Benelux).
    • 
          
  • Coordinated project delivery, ensuring alignment with scope, timelines, budgets, and customer expectations.
    • 
          
  • Supported project governance, reporting, and Information on Demand (IoD) activities.
    • 
          
  • Gained hands-on exposure to cloud security and endpoint protection technologies, including NSX-T, Workspace ONE, and Carbon Black
    • 
          
  • Contributed to the successful delivery of FY21–22 revenue targets through effective project and resource management.
    •      
          

        

      

    


    

      

        
Projects

        
Things I’ve Built

      


        

          
CV Website

          
June 2026

          
Developed a responsive web application that transforms a traditional PDF CV into an interactive personal portfolio website. The project involved extracting and organising information from a PDF resume, including personal details, education, work experience, technical skills, and projects, before presenting the data through a modern, user-friendly interface.
             The website was designed to improve accessibility and user engagement by providing a dynamic alternative to a static PDF document. Features include responsive design for desktop and mobile devices, structured navigation, downloadable CV functionality, project showcases, and contact information.

          

            Front & Backend DevelopmentPDF ProcessingUX/UI Design
          

          Request Code Access
        


      

          
CipherRisk

          
June 2026 - ongoing

          
CipherRisk Command is a tactical, intelligence-inspired web application designed to help organisations understand and manage their cybersecurity risks through advisory. 
            The platform translates complex cybersecurity concepts into clear, actionable recommendations, enabling businesses and non-technical users to identify weaknesses in their security posture and prioritise improvements.
          

          

            Front & Backend DevelopmentCyber SecurityUX/UI Design
          

          Request Code Access
        


    


    

      

        
Certifications

        
Achievements & Training

      


     

  

    
Certified Information Security Management Principles (CISMP)

    
BCS • May 2025

  


  

    
PCI-DSS Lead Implementer

    
GRC Solutions • January 2024