Md Sabbir Hossain

Experience

From national cyber defence to Canadian financial services.

Select any role to expand the details.

  1. Jan 2023 – Present Short-Term Cybersecurity Consultant (expert roster) The World Bank On-demand advisory on cyber strategy, risk and digital governance for Bank projects and client governments.
    • Selected onto the Bank's cybersecurity expert roster through competitive vetting.
    • Provide document review and expert technical opinions on cybersecurity strategy, risk management and digital governance.
    • Cyber strategy
    • Advisory
  2. Dec 2024 – Present Financial Services Representative goeasy Ltd. (easyfinancial), Ottawa Front-line AML/KYC and fraud-prevention controls in Canadian consumer lending.
    • Apply AML/KYC and fraud-prevention controls to lending decisions in line with FINTRAC requirements.
    • Make risk-based approval decisions and escalate suspected financial crime.
    • Regional Employee of the Quarter, 2026.
    • AML/KYC
    • FINTRAC
    • Fraud
  3. Sep 2020 – Sep 2023 Graduate Researcher, IBM Center for Advanced Studies University of Ottawa / IBM Machine learning for phishing detection; teaching and lab design.
    • Built ML models for phishing detection and automated tracking of cybercriminal infrastructure.
    • Taught secure system design and SEC5100 Fundamentals of Cybersecurity; designed a hands-on cyber lab.
    • Research Fellow (Data), Anti-Phishing Working Group, 2022 – 2024.
    • Research
    • ML
    • Teaching
  4. Sep 2019 – Dec 2020 Cybersecurity Risk Analyst Bangladesh e-Government CIRT · also N-CERT (2020) Core member of the team that built Bangladesh's first government CIRT.
    • Designed and ran risk-assessment and incident-response processes that helped cut nationwide cyberattacks by about 95%.
    • Ran national VAPT, IT audit and risk programmes that found 500+ critical vulnerabilities.
    • As Chief Coordinator at N-CERT, led audit of 23 critical infrastructures incl. the Tier-IV data centre (~65% compliance gain).
    • Wrote national guidelines on VAPT, cloud security, Zero Trust and audits; set up the National Cyber Helpline.
    • CIRT
    • Audit
    • Policy
  5. Jan 2016 – Sep 2019 Managing Director · Information Security Consultant NRD Bangladesh Ltd. / Norway Registers Development AS Directed national-scale cybersecurity programmes for the Government of Bangladesh.
    • Led 8 national cybersecurity projects worth $10M+, including cyber sensors at 17 critical infrastructure sites.
    • Delivered the national CIRT, its lab and the digital forensics lab.
    • Led the national cybersecurity strategy with Oxford's GCSCC; project-managed VAPT of Bangladesh Bank's BACH-II.
    • Ran the subsidiary's P&L, client acquisition and contract negotiation.
    • Programme leadership
    • Strategy
    • P&L
  6. Aug 2010 – Nov 2015 Technical Manager · Local Technical Expert & Trainer Device Technologies · Verint Systems Security-intelligence, forensics and lawful-interception platforms for government agencies.
    • Led an 8-person team deploying cyber-intelligence, digital forensics and lawful-interception systems.
    • Trained government users on Verint security-intelligence platforms.
    • Forensics
    • Team lead

Certifications

Leadership

  • EC-Council Certified CISO (C|CISO)

Governance, audit & privacy

  • ISO/IEC 27001 Senior Lead Auditor (PECB)
  • ISO/IEC 27701:2025 Lead Auditor
  • COBIT 5 (ISACA)
  • ITIL Foundation

AI governance

  • ISO/IEC 42001:2023 AI Lead Auditor

Offensive security

  • Certified Ethical Hacker (CEH)
  • Lead Pen Test Professional

Forensics & investigation

  • AccessData Certified Examiner (ACE)
  • Certified Cyber Crime Examiner (3CE)

Financial crime

  • Certified Online Fraud Prevention Specialist (COFPS)

Education & delivery

  • Certified Cybersecurity Educator Professional (CCEP)
  • Google Cybersecurity
  • Google Project Management

In progress

  • CISSP (ISC2)
  • CISM (ISACA)

Education

  • Master's, Electrical & Computer EngineeringUniversity of Ottawa · 2023 · Dean's Scholarship; IBM CAS Fellowship
  • Program on Cyber Security Studies (PCSS)George C. Marshall European Center for Security Studies, Germany
  • BSc, Electronics & Telecommunications EngineeringPrime University, Dhaka · 2010

Professional service

  • C|CISO Exam Committee MemberEC-Council · 2023 – Present
  • Exam Development VolunteerISC2 · 2023 – Present
  • Safe and Secure Online VolunteerISC2 · 2024 – Present
  • Technology MentorConnected Canadians, Ottawa · 2023 – Present
  • MemberOWASP · HTCIA · NICE/DoD Cybersecurity Workforce Group