Abdulelah Al Tayeb, CISA, CRISC, CORP

Director IT Risk at Al Rajhi Bank

• Saudi Arabia - Riyadh
• My current job since September 2016

Executive Risk Manager at Al Rajhi Bank

• Saudi Arabia - Riyadh
• January 2015 to February 2017

Bank - Credit and Risk Management
Riyadh
Worked on the development and implementation of Operational Risk Framework (ORF) in ARB Groups. Reviewing RCSAs, Vendor/Outsourcing risk assessments, Policies & Procedures and New Products from an Operational Risk perspective. Facilitate, monitor and report Business Group’s RCSAs & KRIs to the Group Operational Risk Committee. Supporting projects and leading deep dive process reviews to identify control gaps. Maintain and strengthen relationships with business units and overseas / subsidiaries by providing guidance/support in operational risk management. Manage Departmental open exceptions and ensure timely closure. Provide Operational risk framework presentations and training in operational risk (including system training / workshop) across the Group.

IT Audit Manager at Alrajhi Bank

• Saudi Arabia - Riyadh
• September 2011 to December 2014

Manage and supervise IT Audit engagements within planned time frame to provide reasonable assurance on adequacy of controls and assist in meeting the bank’s objectives. These audit engagements covered special reviews on SAMA regulations and inspection, IT processes and e-Banking channels systems. Prepared and presented high quality audit reports identifying root causes, risks and impact for each audit observation.
Follow-up on implementation of identified observations based on due dates, through the review and validation of pending audit observations. Participated in building the Audit Universe and Audit Annual Plan for IT Audit Department.

Network and Security Architect at Ministry of Higher Education

• Saudi Arabia - Riyadh
• March 2010 to August 2011

Worked with Director of IT Infrastructure to enhance current network and security infrastructure and operations. Handled different project and initiatives in IT infrastructure department including Data Center migration, Network design and enhancement, Interconnect ministry worldwide sites, establish e-certificate center to achieve e-government in ministry, smart building project, planning for Security Operation Centre and ISO 270001 implementation.
Manage and supervise Information security and Network departments to streamline its processes and optimize workflow.

Information Security Monitoring Center Manager at Bank AlBilad

• Saudi Arabia - Riyadh
• January 2008 to March 2010

Two years of experience in managing Information Security Monitoring and security assessment services including Managing Security Monitoring Center requirements and projects, Maintaining Security related process and procedures, managing day-to-day security monitoring, incidents handling and security investigation, vulnerability management process, facilitating Information security risk assessment and security penetration testing.

Prepared and presented security status reports to the Chief Information Security Officer including analyzed frequent incidents, information security related risks, impact and root cause. Participated in information security strategic plans, budgeting, resources and key projects including PCI- DSS.

System Security Officer at Bank Al Bilad

• Saudi Arabia - Riyadh
• November 2005 to December 2007

Worked on Incident handling and security Incident Investigations. Performed Auditing and reviewing of application, network and system security. Evaluated and recommended security technologies. Handled vulnerability assessment and recommendation. Performed Risk assessment for critical business services. Managed and implemented various security technologies including Firewalls, VPN, Antivirus, Security Event Management System, Host and Network IPS, Vulnerability scanner and Mail Security and Anti-spam System.

Information Security Analyst at Saudi Telecom Company

• Saudi Arabia - Riyadh
• May 2005 to October 2005

Worked on security operation center as first level of support to monitor, analyze, investigate and handle security Incidents. Worked on various Security technologies from operation perspective including Firewalls, Antivirus, Security Event Management System, Host and Network IPS, Control security access through dial-up.

System and Network Support at Saudi Industrial Development Fund

• Saudi Arabia - Riyadh
• September 2002 to April 2005

Worked with network support team to support various infrastructure components including Data backup, Network traffic monitoring, Management and troubleshooting of switches and routers and implemented security in network devices. Supported Database servers and Online Document Servers. Administrated and troubleshoot Microsoft Windows and VMS OS.

Technical Support at Shashah Net

• Saudi Arabia - Riyadh
• August 2001 to September 2002

on domain registration and web hosting for Shashah net clients and support hosted server which located in US. Provided client with services such as web designing and built-in board setup. Provided support for Shashah net website.