Mustafa Kras

• Conducted internal IT audits and compliance gap analyses for DORA, EMI, MiCA, and ISO27001/2 standards.
• Developed and maintained ICT risk and security policies to enhance organizational compliance.
• Led cloud audit reviews for AWS, Azure, M365, and GWS, ensuring alignment with industry best practices.
• Performed third-party/vendor risk gap analyses, reviewing security evidence and identifying control gaps.

• Managed Azure AD user provisioning and identity lifecycle processes to enhance security and efficiency.
• Supported access control practices, ensuring adherence to least privilege principles.
• Assisted with account and access troubleshooting, improving user experience.
• Documented procedures to streamline access requests and onboarding/offboarding processes.

• Developed "Bizpul," an AI-driven recommendation system for enhanced tennis match analysis using Computer Vision and NLP.
• Engineered a real-time tracking pipeline with YOLO v8 for player detection and tennis ball tracking.
• Implemented court keypoint extraction using CNNs to provide spatial context for match statistics.
• Integrated Large Language Models (GPT) to generate insights for coaches and business owners.

• Delivered IT security and compliance consulting services in a hybrid QA, product management, and security analysis role, ensuring security and compliance throughout the SDLC.

(Note: Specific client names, project scopes, and technical environments are protected under strict Non-Disclosure Agreements).

• Co-founded and managed this platform as a side-project alongside my primary security auditing roles.
• Deployed AI-based software, increasing user participation and halving testing costs.
• Streamlined IT functions, contributing to a 30% revenue growth.
• Ensured security compliance by working with fintech platforms to enhance payment solutions.

• Delivered coding workshops to 20+ students on programming and software development.
• Organized Google Developer events, increasing student participation by 25%