Bayt.com

Submitting more applications increases your chances of landing a job.

Here’s how busy the average job seeker was last month:

Opportunities viewed

Applications submitted

Keep exploring and applying to maximize your chances!

Looking for employers with a proven track record of hiring women?

Click here to explore opportunities now!
We Value Your Feedback

You are invited to participate in a survey designed to help researchers understand how best to match workers to the types of jobs they are searching for

Would You Be Likely to Participate?

If selected, we will contact you via email with further instructions and details about your participation.

You will receive a $7 payout for answering the survey.


User unblocked successfully
مكرم مكّاوي, Cybersecurity Assurance Services Manager

مكرم مكّاوي

Cybersecurity Assurance Services Manager·Trusted Partners

Saudi Arabia

Master's degree, Security

Work experience

Total years of experience: 11 years, 6 months

Cybersecurity Assurance Services Manager

August 2023 - Present

Trusted Partners

Riyadh, Saudi Arabia

August 2023 - Present

• Providing cybersecurity GRC services to clients
• Building cybersecurity strategies, policies, and procedures
• Supervising vulnerability assessment and penetration testing (VA/PT) activities
• Leading cybersecurity GRC engagements across multiple governmental and private sector organizations
• Building and leading high-performing cybersecurity teams and developing talent
Company industry:
IT Services

Cyber Technical Assurance (CTA) Section Manager

January 2019 - June 2023

Ministry of Foreign Affairs

Riyadh, Saudi Arabia

January 2019 - June 2023

• Conducted risk assessments and VA/PT activities
• Performed Threat Assessment and Remediation Analysis
• Collaborated with ERM team to identify assessment opportunities
• Ensured compliance with NCA regulations
• Created service catalog and integrated IS projects
• Led 3-year strategy plan and operational assessments for embassies
Company industry:
Public Administration

Layer 2 SOC Engineer

September 2016 - June 2018

General Authority of Civil Aviation (GACA)

Jeddah, Saudi Arabia

September 2016 - June 2018

• Provided incident response support
• Conducted VA/PT activities using various tools
Company industry:
Airlines

Junior Penetration Tester

August 2015 - September 2016

JAL International Co.

Riyadh, Saudi Arabia

August 2015 - September 2016

• Conducted manual VA/PT
• Reported findings and provided recommendations
Company industry:
Oil & Gas
Job role:
Information Technology

System Security Administrator

June 2014 - November 2015

The Armed Forces Hospitals (PSHRC)

Al Hada, Saudi Arabia

June 2014 - November 2015

• Administered antivirus solutions and redesigned AD structure
• Improved staff security awareness
• Liaised with vendors and third parties
Company industry:
Medical Hospital
Job role:
Information Technology

Education

Concordia University

May 2013

May 2013

Master's degree, Security

Canada

King Abdul-Aziz University

May 2007

May 2007

Bachelor's degree, Computer Science

Saudi Arabia

Skills

CYBER GOVERNANCE
Intermediate
CYBER GOVERNANCE
Intermediate
CYBER SECURITY
Intermediate
CYBER SECURITY
Intermediate
GOVERNANCE RISK MANAGEMENT AND COMPLIANCE
Intermediate
GOVERNANCE RISK MANAGEMENT AND COMPLIANCE
Intermediate
PENETRATION TESTING
Intermediate
PENETRATION TESTING
Intermediate
QUALITY ASSURANCE
Intermediate
QUALITY ASSURANCE
Intermediate
REGULATORY PROCESS
Intermediate
REGULATORY PROCESS
Intermediate
RISK MANAGEMENT
Intermediate
RISK MANAGEMENT
Intermediate
STRATEGIC PLANNING
Intermediate
STRATEGIC PLANNING
Intermediate
VULNERABILITY ASSESSMENTS
Intermediate
VULNERABILITY ASSESSMENTS
Intermediate

Languages

Arabic

Native Speaker

English

Expert

Turkish

Expert

Training and Certifications

Certifications
CyberPro – Intermediate Level
Exploit Development Student (XDS v1)
Certified in Risk and Information Systems Control (CRISC)
Certified Information Security Auditor (CISA)
Certified Information Security Manager (CISM)
eLearn Security Junior Penetration Tester (eJPT)
eLearn Security Certified Professional Penetration Tester (eCPPT)
Offensive Security Certified Professional (OSCP)
PMI Risk Management Professional (PMI-RMP)
ISO 27001 Lead Implementer

Hobbies and interests

Learning about new technologies