Cybersecurity Leader · GRC & AI Governance · Ottawa, Canada
15+ years delivering national-scale cybersecurity across government, critical infrastructure and financial services. Core member of the team that built Bangladesh's first government CIRT after the 2016 Bangladesh Bank SWIFT heist, director of $10M+ national programmes, and contributor to the country's national cybersecurity strategy.
Across the cyber domain
BGD e-GOV CIRT · Norway Registers Development / NRD Bangladesh
Built the country's national government CIRT after the 2016 Bangladesh Bank SWIFT heist.
Government of Bangladesh · with University of Oxford GCSCC
Led Bangladesh's national cybersecurity strategy with Oxford's Global Cyber Security Capacity Centre.
Bangladesh National CERT · Digital Security Agency
Led audit and risk assessment of 23 critical information infrastructures, including the national Tier-IV data centre.
Mr. Sabbir Hossain is a person one can rely for business operations and things get done, even when situations get difficult. His technical in-depth knowledge of ICT and Information Security disciplines are making him great communicator and effective business …
I have worked with Sabbir in several IT and Cyber Security international projects, financed by major international donors. In these projects Sabbir always was very professional and qualified manager, his project planing and execution skills were excellent. Sa…
Mr. Sabbir is a fantastic manager. I had the pleasure of working with him on several projects for two years, and he leads by example. He always kept the team morale high, and I believe he is the best manager I've ever had because he is so approachable. His ab…
Leadership
EC-Council Certified CISO (C|CISO)
Governance, audit & privacy
ISO/IEC 27001 Senior Lead Auditor (PECB) · ISO/IEC 27701:2025 Lead Auditor · COBIT 5 (ISACA) · ITIL Foundation
AI governance
ISO/IEC 42001:2023 AI Lead Auditor
Offensive security
Certified Ethical Hacker (CEH) · Lead Pen Test Professional
Forensics & investigation
AccessData Certified Examiner (ACE) · Certified Cyber Crime Examiner (3CE)
Financial crime
Certified Online Fraud Prevention Specialist (COFPS)
Education & delivery
Certified Cybersecurity Educator Professional (CCEP) · Google Cybersecurity · Google Project Management
For hiring teams
Open to senior cybersecurity, IT risk, GRC and security programme roles in Canada. I bring national CIRT and critical-infrastructure delivery, programme and P&L leadership, and current Canadian AML/KYC experience.
See experienceFor organisations
From cyber strategy and incident-response capability to audits, AI governance and penetration-test programmes, on fixed-scope engagements or as a fractional leader.
See services