I work where customer trust, compliance evidence, and security tooling overlap.
name: Syed Zarak Hassan
location: Nottingham, United Kingdom
current_role:
title: Compliance Analyst
company: Thrive Learning
education:
- MSc Cyber Security, Nottingham Trent University
- BSc Software Engineering, Iqra National University
focus:
- vendor risk and due diligence
- customer trust and security assurance
- compliance operations and process design
- security tooling and workflow automation
currently_building:
- VenderScope
- ContraAI
- ZARAK_OS[THRIVE] Manage a 50+ vendor portfolio across onboarding, risk reviews,
due diligence, and account health.
[DPA] Redesigned the company-wide DPA tracking process and reduced
time-to-approval by 70%.
[ISO 9001] Built six process flows from scratch to support a successful
Stage 1 audit and make ownership clearer for non-technical teams.
[MDM] Led a Kandji migration across 250+ endpoints with zero downtime
and reduced IT support tickets by 40%.
[TRUST] Support RFIs, security questionnaires, and customer-facing
technical assurance work.
[NEXIQUE] Owned 15+ client accounts end-to-end across onboarding,
delivery, communication, and relationship management.| Product | Why it exists | Stack |
|---|---|---|
| VenderScope | Built from the pain of handling vendor risk manually across 50+ vendors. Designed to turn point-in-time reviews into continuous vendor risk intelligence. | JavaScript |
| ContraAI | AI-assisted contract review platform built to make clause analysis faster, clearer, and more structured. | Next.js · Claude API |
| ZARAK_OS | Cyber-noir portfolio OS built to present my work like an interactive environment rather than a static site. | TypeScript · Three.js |
I am interested in work that sits between:
- customer trust
- compliance evidence
- security operations
- technical onboarding
- process design
- useful internal tooling
That usually means taking something messy,
understanding the people stuck with it,
and building a cleaner way through.Security, Trust & Compliance
Tools & Platforms
Building With
contribution trail · evidence grid · updated every 12h
Building at the intersection of security, compliance, customer trust, and product.
Open to GRC, customer trust, InfoSec, and compliance engineering roles in the UK.