ABDULMONIEM ALBRAIH

• Establish, implement, and maintain a unified IT/OT cybersecurity governance framework aligned with organizational objectives, industry best
practices (e.g., NIST CSF, ISA/IEC 62443), and national/international regulations.
• Strong knowledge of Saudi Aramco MSAER, such as the SAES, SAEP, and SACS series.
• Develop, review, and update cybersecurity policies, standards, procedures, and guidelines specifically tailored for both IT systems and industrial
control systems (ICS/OT).
• Help incorporate cybersecurity needs into the overall plan for managing risks in both IT and OT systems, by spotting possible threats and
weaknesses, and understanding how they could affect the confidentiality, integrity, and availability of information, as well as the safety and
reliability of operational processes.
• Develop and maintain a risk register for IT and OT environments, tracking identified risks, their severity, mitigation strategies, and residual risk
levels.
• Provide recommendations for risk treatment plans, control implementation, and security investments based on risk appetite and business
criticality, with a strong focus on OT operational constraints and safety.
• Lead and oversee the organizations efforts to comply with the National Cybersecurity Authority (NCA) and relevant international standards like
ISA/IEC 62443, NIST Cybersecurity Framework (CSF), ISO 27001, and specific regulations for both IT and OT areas. The process includes mapping
controls, assessing implementation, identifying gaps, and developing remediation plans.
• Integrate cybersecurity GRC requirements into the vendor selection and management processes for IT and OT suppliers, ensuring third-party risk
is assessed and managed effectively.
• Worked together with IT and OT teams to improve cybersecurity risk management by updating policies and carrying out audits using GRC,
ISA/IEC-62443, and NIST standards.

• Provide expert technical support for data networks, wireless, IP telephony, IPTV, and structured cabling systems.
• Lead the full systems engineering lifecycle, from site surveys and requirements analysis to final design and shop drawings.
• Develop key project deliverables, including Material Take-Offs (MTOs) and as-built drawings.
• Serve as the main technical point of contact for clients, suppliers, and contractors.
• Collaborate across internal teams, including project engineers, designers, and procurement, to ensure project success.
• Apply deep knowledge of critical cybersecurity standards like IEC 62443, NIST, and NERC CIP.
• Run the security review program to proactively identify, track, and resolve system vulnerabilities.
• Perform threat intelligence analysis to understand and counter emerging cyber risks.
• Identify and report on security breaches, system weaknesses, and non-compliance with security policies.
• Drive the remediation of all internal and external audit findings to ensure continuous compliance.

• Planning and coordination of the major telecom contracts with various AEs.
• Conducting an end-to-end evaluation of business requirements to conceptualize, design, and implement key system tools aimed at streamlining
processes, reducing costs, and reducing the element of error.
• Ensuring that the standardization of telecommunication engineering solutions, operations, and maintenance methodology is appropriate and
within quality standards.
• Designing and implementing cabling systems for LANs, engineering communications systems and programs, and ensuring performance
improvements to optimize the achievement of business plan objectives.
• Keeping abreast of relevant Engineering Department Procedures (EDPs) and designing and implementing Bechtel Standard Application Programs
(BSAPs).
• Conceptualizing turnkey communication solutions as per requirements, analyzing associated technical complexities.

• Maintained hardware cabling and network device connectivity (routers, switches, hubs).
• Coordinated with the technical support team to achieve all anticipated goals.
• Oversaw and supervised major issues pertaining to the planning, administration, and security management of all systems, network, and database
installations.
• Evaluated the performance and technical competency of staff in response to customer feedback.
• Scheduled training sessions for regular upgrades to technology and services.
• Supported SAPMT (Saudi Aramco Project Management Team).
• Monitored day-end system performance reports for anomalies and took immediate remedial measures.
• Performed regular system checks and preventive maintenance to ensure optimum system uptime and performance.
• Administered and maintained corporate network hardware and software, including routers, switches, VPNs, and firewalls.
• Implemented network enhancements to improve the performance and reliability of the system.