Cyber Security GRC Manager
Medgulf
Total years of experience :21 years, 10 Months
Cyber Security Governance, Risk and Compliance Manager
Cyber security consultation services
The thought-leader for information risk and security management and related activities throughout the organization. • Responsible for developing and implementing strategies concerning the protection and legitimate exploitation of the information assets, • Responsible of ensuring Al Hammadi Development & Investment Co compliance with relevant laws and regulations, • Responsible of governing and (at a high level) managing the information risk and security management function. • Responsible of all supporting/enabling achievement of business objectives. • Responsible of collaborates with and seeks alignment of the entire Al Hammadi Hospitals since information is a valuable yet vulnerable resource throughout. • Responsible of liaises with external stakeholders such as auditors, service suppliers, customers and authorities such as industry regulators on significant matters • Building and managing Computer Emergency Response Team / Computer Security Incident Response Team • Responsible for Cybersecurity • Planning and managing Disaster recovery and business continuity management • Responsible for Identity and access management • Responsible for Information privacy • Responsible for Information regulatory compliance (e.g., US PCI DSS, FISMA, GLBA, HIPAA; UK Data Protection Act 1998; Canada PIPEDA) • Responsible for Information risk management • Responsible for Information security and information assurance • Managing Information Security Operations Center ISOC • Responsible for Information technology controls for financial and other systems • Responsible for IT investigations, digital forensics, eDiscovery • Responsible for Security Architecture
1. Plans, develops and ensures the enterprise computing operations and KPIs are met with a high level of quality 2. Documents the methods and procedures for service delivery and service operations within the enterprise computing domain 3. Logs operations as per the required procedures 4. Performs data cleansing activities on DAL servers to improve server performance 5. Removes malformed physical addresses, email addresses, or phone numbers 6. Combines data files for use of suppression 7. Performs data backups and storage of data on a daily basis 8. Performs periodic testing of data backups to ensure validity, completeness and integrity of data 9. Ensures that adequate controls are implemented to maintain confidentiality, integrity and availability of information for DAL Knowledge Accountabilities:
1. Understands the business trends, drivers, and requirements for DAL 2. Keeps current with latest market trends and developments, and stays abreast with current trends and leading practices in ICT 3. Shares technical knowledge collaboratively with other ICT team members 4. Maintains documentation of Infrastructure landscape Corporate Accountabilities:
5. Delivers exceptional service to business and ICT stakeholders 6. Acts as a visible role model for colleagues and team members 7. Completes activities and produce outputs (e.g. documents and reports) to a high standard of quality 8. Identifies opportunities for continuous improvements when undertaking the day-to-day activities 9. Identifies opportunities for innovation when undertaking the day-to-day activities
10. Complies with all DAL Group and ICT values, policies, procedures and standards
1. Systems Technology Head: DAL Group Centralized ICT Department: DAL Group Centralized ICT Department http://www.dalgroup.com
August 2012 - Date
Duties and responsibilities: • Design and implement short- and long-term strategic plans to ensure systems capacity
meets existing and future requirements.
• Prepare RFPs, bid proposals, contracts, scope of work reports, and other documentation for systems technology projects and associated efforts to meet business objectives.
• Lead, Manage and set priorities for the design, maintenance, development, and evaluation of all systems to ensure continuity and availability of services.
• Conduct research and make recommendations on products, services, protocols, and standards in support of all systems technology procurement and development efforts to
deliver quality services.
• Manage operational costs; conduct near- and long-term financial forecasts for expanded
functionality/user base to be aligned with business direction and objectives.
• Coach and develop team members and evaluate performance in order to maintain focus on quality and best practices and ensure that services are delivered as per agreed Service
Level Agreement & Operations Level Agreement
• Responsible of 2013 Projects planning Exchange 2013/Lync 2013/Websense/TMG
2. Senior System Engineer
DAL Group Centralized ICT Department http://www.dalgroup.com
December 2011 - November 2012
Duties and responsibilities:
Supervision of all System Technology Developing, Planning & architecture.
Responsible of all ICT Infrastructure projects and operations such as: • Corporate Messaging and collaboration Service (MS exchange)
• Active Directory infrastructure
• High availability projects ( SAN / NAS)
• Voice over WAN Services
• Enterprise Project Management (MS Project Server 2010)
• Virtualization Solution (vSphere / ESX)
• Citrix Migration to Virtualization (XenServer/XenApp/XenDesktop/Access
Gateway)
• Project of Security layer web filtering/Proxy (TMG /WebSense/Fortinet/Watch
Guard)
All systems Operations monitoring and trouble shooting Performance Monitoring and troubleshooting.
First Line Messaging and Active Directory Domain support.
Monitoring and trouble Shooting for all DAL Group Active Directory and messaging System.
Monitoring and trouble Shooting Active Directory and Messaging System for Khartoum International Community School.
Monitoring and trouble Shooting Active Directory and Messaging System for DAL Group Dubai Office.
Monitoring and trouble Shooting Active Directory and Messaging System for DAL Group Malaysia Office.
Project Undertaking:
• Development Microsoft Enterprise Project Management (EPM) 2010.
• Upgrading Current Messaging environments to MS Exchange 2013.
• Upgrading current office communication Service to Lynch 2013.
• Deployments of MS Exchange 2010 at DUBAI Branch Office.
• Deployments of MS Exchange 2010 at Ezentus Branch Office
• Upgrading currant VMware ESX 4.1. to 5.1
• Developing and Planning for Disaster recovery and High Availability Plan Using SAN/ NAS
solutions.
Projects accomplished:
• Develop current Active Directory Domains MS Windows 2008.
• Migration current messaging environment to MS Exchange 2007.
• Office Communication Server 2007R2.
• Full Unified messaging Service.
• ASSP AntiSpam
• Design and Upgrade to Debian Linux DNS
• Develop Citrix Meta frame Presentations Server 4.0
3. Systems & Operations Lead
Section of Systems & Operation
January 2008-Decemeber 2011
Duties and responsibilities:
All systems Operations monitoring and trouble shooting
• Performance Monitoring and troubleshooting.
• First Line Messaging and Active Directory Domain support.
• Monitoring and trouble Shooting for all DAL Group Active Directory and messaging
System.
• Monitoring and trouble Shooting Active Directory and Messaging System for Khartoum
International Community School.
• Monitoring and trouble Shooting Active Directory and Messaging System for DAL Group
Dubai Office.
• Monitoring and trouble Shooting Active Directory and Messaging System for DAL Group
Malaysia Office.
4. System Engineer II
DAL Group Centralized ICT Department
January 2006-December 2007
Duties and responsibilities:
Responsible of Administration of all DAL Group running operating System and messaging
environment, this includes the following:
• Performance Monitoring and troubleshooting.
• First Line Messaging and Active Directory Domain support.
• Team Member of installation and implementation for all DAL Group Active Directory and messaging System.
• Installing and implementing a complete project of Active Directory and Messaging
System for Khartoum International Community School.
• Installing and implementing a complete project of Active Directory and Messaging
System for DAL Group Dubai Office.
• Installing and implementing a complete project of Active Directory and Messaging
System for DAL Group Malaysia Office.
Besides the supervision of the daily System Administrator operations: 1. Requirement identification.
2. Solutions Architect.
3. RFPs preparation.
4. Vendor and Technology selection process.
5. Managing various projects' phases & activities.
5. Technical Support Engineer
DAL Food Industries Coca-Cola Member of DAL Group
January 2002-December 2005
Duties and responsibilities:
Supervision of the technical support activates for the following DAL Group Sites:
• DAL Food Industries (Coca-Cola)
• Sayga Floor Mills.
Besides the supervision of the daily System Administrator operations: Time and Attendance
6. IT Technical Support Manager
EL fangary Engineering Co
September 1999-January 2002
Assembling Pcs and Support Clients solve Technical Problems managing, my Team of
Technical support engineers, and networks
(MSS) Master of Security Science: EC-Council University USA 2013.
(MBA) Master Business Administration: Khartoum University 2008.
(B.Sc.) in Computer Science: Khartoum University 1999.