بشار الخطيب

Program Director/CISO for Nation/Event-Wide Practices:

Key Responsibilities:

• Supervises, manages and leads cybersecurity teams and work.
• Provides expert consultancy and advice on
cybersecurity topics to stakeholders & teams
• Cybersecurity strategies, governance & risk management
• Adopting and tailoring cybersecurity frameworks
• Develops and updates the organization’s cybersecurity policies, procedures, and plans • Cyber security operation center & managed security services
• Plan & guide threat intelligence & incident response capability building
• Cybersecurity solutions engineering & architecture
• Designs and oversees the development and
implementation of cybersecurity capabilities
• Cybersecurity programs management

Lead the IS & GRC Practices/Program for the FIFA world-Cup Qatar 2022

Key Responsibilities:

• Information Security Program Management
• IT Governance, Risk & Compliance Management
• Supervise Information Security projects (Planning, Scoping & delivery).
• Responsible for Cyber Incident Response Management.
• Lead Enterprise Cyber Security Strategy
• Information Security Budget/Business Planning
• Monitor internal and external information security policy compliance.
• Responsible for Enterprise Cyber Security Awareness Program
• Managing Data Security Lifecycle

Lead the Cybersecurity Operations for the FIFA world-Cup Qatar 2022

Key Responsibilities:

• Lead day-to-day IT Security Operations.
• Supervising Security Monitoring Service «SOC».
• Plan, design & build enterprise security solutions
• Reviewing, developing, and continually refining security operation’s operational manuals and procedures • Acting as IT Disaster Recover «DR» team Lead
• Manage & Monitor business/budget planning & management.
• Attend and guide cyber security Incident response
• briefing executives and managers on security-related issues

Subject Matter Expert as Part of Managed Security services.

Key Responsibilities :

• Act as Subject Matter Expert “SME” for managed security services.
• Conduct Security Controls Configuration review, Hardening & Baselining
• Conduct security UAT “User Acceptance test” & TOP “Turn to Operation” activities.
• Document standard security operating procedures (work instruction, security recommendation, setup review, operational readiness, security posture report). • Security Monitoring Service «SOC» Service profiling & demonstration.
• Security Monitoring Service «SOC» Service Provisioning & administration.
• Develop & operate security monitoring service to ensure clients' deliverables and use-cases are properly addressed.
• Responsible for Incident response

As a Senior MSS security Engineer my main responsibility to help in delivering managed security services to Company's Clients from our 24x7 operations center in Riyadh while performing the following duties:
• Manage, Maintain and Document the technologies that enables MSS to collect and analyze security event data from different event sources.
• Provision the MSS service and Conduct POC (Proof of Concept) to new MSS customers as well as perform the device/event source integration with MSS log management/monitoring technology.
• Participate in Define, document the MSS internal processes, polices and procedure.
• Perform Teir2 Support For: Managed Firewall FW/VPN Service, Manged Intrusion Prevention/Detection Systems (IDS/IPS) Service.
• Perform Teir2 Support For: Managed Log Management Service (Analyze and respond to security threats).
• Conducting the Vulnerability Assessment(VA) and Penetration testing (PT) using market leading technologies ( Qualys, Core Impact) and delivering the technical Reporting and Presentation for the client.
• Perform Vendor Management for Technologies used within MSS ex. Arcsight Logger and ESM, Verisign Teraguard Infrastructure, Security solutions.

Products and Technologies:
Firewall "Cisco ASA/PIX, Juniper Netscreen/SSG, ISS ", IPS/IDS "Cisco IPS/IDS, Juniper IDP /NSM, ISS Siteprotector". VA Tools (Nessus, QualysGuard), PT Tools (Core Impact) SIEM and Log Management solutions Arcsight Logger/Connector, Arcsight ESM, Teraguard, ...

As a Customer Support Engineer my main responsibility was to provide technical support for Cisco’s products to customers and partners via the telephone and/or through e-mail and based in TAC Center hosted in Estarta Solutions (Amman):
my responsibilities include: -
• Receiving and resolving complex issues and meeting customer needs
• Working with other people to solve problems and enhance future products
• Using debugging tools and lab simulations to analyze problems and identify solutions
• Keeping up-to-date with new technology products in order to provide support as soon as they are launched in the market

Products and technologies:
Cisco Aironet APs, Bridges, Cisco Airospace technology Wireless lan controller (WLC), LWAPP AP, Cisco AAA server “Cisco Secure ACS”.

As a Technical/Pre-sales Engineer my main responsibility was to provide technical support for companies customers, and the Pre-sales activities for companies customers.