Aysha Jamsheer

• Led the implementation of the Information and Cyber Security GRC (governance, risk, and
compliance) program, resulting in an increase in security maturity and a decrease in audit findings,
while ensuring improved resilience against cyber threats.
• Contributed to the establishment of the Information/Cyber security framework and improvement of
policies, while improving the organizations ability to adapt to evolving security threats and
regulatory requirements.
• Delivered the Information Security Posture to the Executive Management with a focus on risk
mitigation and a more robust security framework as the Secretary of the Information Security
Management Committee.
• Identified and mitigated various security risks to safeguard the Banks initiatives and projects.
• Ensured the Bank and Groups compliance with CBB, CBK, RBI, ISO 27001, PCI DSS, PCI PIN,
and SWIFT CSCF standards, resulting in increased compliance levels.

• Managing and overseeing compliance requirements across the Group and ensuring successful
security compliance audits against ISO/IEC 27001, PCI DSS, SWIFT CSCF, and CBB.
• Led the identification of critical assets and applicable threats, resulting inenhanced security
measures and an increase in cyber resilience.
• Improved security awareness across the organization by executing a comprehensive security
awareness program, resulting in a more vigilantand informed staff.
• Issuing periodic reporting to management and regulators of the security posture.

• Led the successful establishment of the Information Security Department, resulting in an
improvement in compliance with industry standards.
• Implemented Information Security standards, resulting in a reduction in cyber threats and improved
overall security posture.
• Streamlined the Security Operations Center (SOC) project, increasing threat visibility.
• Conducted various Information Security risk assessments to ensure alignment of information
security requirements with business objectives, enhancing overall security resilience and
minimizing potential security threats.
• Improved Information Security posture by delivering Information Security awareness training to
over 30 employees.