Digital transformation
Platforms and processes are modernized while risk and compliance are kept under control.
Professional Experience
15+ years from engineering to executive leadership
A career progression from software engineering and architecture to cybersecurity leadership and strategic advisory. Client names are kept confidential and shared with references upon request.
Advisory & Ventures
Strategic CTO Advisor, vCISO & Technology Partner
Executive advisory is provided to organizations internationally; partnership is held in two technology ventures.
Executive Leadership
Cybersecurity Leadership (CISO-level)
Cybersecurity strategy, governance, risk and compliance were led for major enterprises in regulated sectors, and security functions were established.
Architecture
Security & Enterprise Architecture
Secure architectures, application security programs and technology standards were designed for large-scale environments.
Engineering
Software Engineering
Enterprise software was built and delivered, forming the hands-on foundation behind later architecture and security decisions.
Enterprise Technology Transformation
Transformation with security built in
Cloud adoption
Secure cloud strategies, landing zones and governance models are established.
Secure SDLC
Security is embedded into engineering pipelines and delivery practices.
Operating models
Technology and security teams are structured for scale and accountability.
Regulatory Frameworks
Hands-on experience with regulators
Practical experience aligning security programs, governance and technology controls with the requirements of key regulators.
SAMA
Saudi Central Bank — Cyber Security Framework and regulatory expectations for banking, insurance and fintech organizations.
CITC
Communications, Space & Technology Commission — regulatory and cybersecurity requirements for telecommunications and digital service providers.
NCA
National Cybersecurity Authority — Essential Cybersecurity Controls (ECC) and related national frameworks for government and critical sectors.
Cross-Industry Experience
Sectors served
- Financial services & fintech
- Government & public sector
- Telecommunications
- Energy & industrial
- Healthcare
- Retail & e-commerce
- Technology & software
Education
Academic foundation
Ph.D. Candidate — Computer & Information Systems Security / Information Assurance
University of Science and Technology
2014 – 2017
Master of Science in Computer Science — Computer & Information Systems
University of Science and Technology
2010 – 2014
Bachelor of Computer Science
University of Science and Technology
2005 – 2009
Licenses & Certifications
Professional certifications
- CISSP — Certified Information Systems Security Professional (ISC2)
- GRCP — Governance, Risk & Compliance Professional (OCEG)
- ISO/IEC 27001 Lead Implementer
- ISO/IEC 27001 Lead Auditor
- ISO/IEC 27005 Lead Risk Manager
- NCA ECC Lead Implementer
- SAMA CSF Lead Implementer
- Cisco CCNP Security
- Cisco CCNP Routing & Switching
- ISTQB Foundation Level — Software Testing
- Advanced Mobile Application Penetration Testing Diploma
- Personal Data Protection Law (PDPL)
- Data Classification & DLP
- Management Consultancy Professional (ISO 20700 & ISO 10019)
- GRC Specialist (ISO 37000, ISO 31000 & ISO 37301)
- Integrated Fraud, Corruption & Bribery Control (ISO 37001, ISO 37003 & AS 8001)
- Alibaba Cloud Professional (ACP) Security Engineer
- Symantec Endpoint Protection 12.x Administration
Professional references and supporting engagement credentials are available upon request before contracting, subject to confidentiality and client approval.
Request Professional References