charan كومار

Lead implementation of SAMA CSF and NCA frameworks in the organisation.
Managed team of 5 members to manage GRC functions
Assisted management to implement regulatory requirements in accordance with SAMA, NCA and PDPL.
Responsible for drafting and maintaining up to date
cybersecurity governance documentation as per regulatory requirements such as SAMA, NCA and PDPL
Worked to achieve SAMA CSF maturity level 3 by implementing cybersecurity controls.
Worked to achieve compliance with NCA guidelines.
Coordinated with vendors to perform independent compliance gap assessments.
Established and managed comprehensive Vulnerability
Assessment (VA) and Penetration Testing (PT) processes, ensuring alignment with organizational and regulatory requirements.
Designed and implemented cybersecurity processes to mitigate vulnerabilities while ensuring regulatory compliance and operational efficiency.
Built and maintained an accurate Asset Inventory, enabling effective vulnerability management and compliance audits.
Defined and monitored Key Performance Indicators (KPIs) to track the effectiveness of security measures and improve overall risk posture.
Selected, deployed, and maintained operationally effective security tools with periodic reviews to ensure their performance.
Developed and enforced application security policies and
procedures, aligning with OWASP Top 10, SAMA, and ISO 27001 standards, ensuring regulatory compliance and reduced vulnerabilities.
Led change management initiatives for clients across various industries, focusing on cybersecurity and risk assessment.
Integrated application security protocols into the CI/CD pipeline, enhancing the secure development lifecycle and reducing security risks in production environments.

•

• Conducted a cyber resilience assessment of existing security
solutions to identify control gaps.
• Performed a cloud security gap assessment and developed
policies, procedures, and standards for cloud adoption.
• Ensured compliance with PCI DSS, SAMA CSF through control
mapping, documentation, and maturity assessments.
• Developed risk assessment reports with impact analysis and
remediation recommendations, presented to senior
stakeholders.
• Collaborated with IT, Risk, and Compliance teams to prioritize
risks and align remediation with business objectives.

RESPONSIBILITIES
• Conduct comprehensive penetration testing on networks, systems, and applications to identify security weaknesses and vulnerabilities, ensuring compliance with regulatory frameworks such as SAMA CSF, NCA CSCC, and ECC.
• Develop detailed reports outlining findings, risk assessments, and recommendations for remediation.
• Conducted Red teaming activity for one of the client.
• Collaborate with cross-functional teams to prioritize and implement security measures based on risk analysis and business impact.
• Utilized various security testing methodologies, frameworks, and tools such as Nessus, Metasploit, BurpSuite, and Kali Linux to conduct thorough security assessments.
• Provide guidance and recommendations on security best practices and compliance standards such as PCI DSS, SAMA CSF, NCA CSCC, and ECC.
• Developed and executed practical solutions to align product teams goals with security requirements, effectively managing security risks without compromising business objectives.
• Led change management initiatives for clients across various industries, focusing on cybersecurity and risk assessment.
• Collaborated with cross-functional teams to integrate cybersecurity measures into existing business processes and systems, ensuring minimal disruption to operations.
• Demonstrated strong analytical and problem-solving skills, thinking critically about complex security issues, and considering their impact on organizational risk and business objectives.

• Led compliance assessments focusing on SAMA CSF, PCI DSS, and
SWIFT security controls.
• Assisted in drafting and refining cybersecurity policies,
baselines, and procedures to align with regulatory standards.
• Supported compliance tracking and evidence preparation for
audits and regulatory inspections.
• Facilitated risk workshops with product and engineering teams to
identify, classify, and mitigate risks.
• Contributed to building an incident response and governance
framework to strengthen resilience against emerging threats.

KEY RESPONSIBILITIES
• Conducted Security assessments and Configuration review using BurpSuite and Nessus.
• Monitored and modified roles and groups in AWS Identity & Access.
• Management module when necessary. Verified inbound and outbound traffic rules in AWS EC2 Security Groups.
• Packaged, tested, and deployed applications of varying complexity ensuring highest quality. Developed scripts and strategies to enhance the overall process.
• Took responsibility of post package release issues and conducted remediation activities.
• Deployed packaged applications and patches using SCCM.
• Delivered >90% First Call resolution for technical issues in Windows.
• and Mac systems and applications, Network, VPN etc.

• Assisted in conducting risk assessments and documenting
identified gaps against frameworks like ISO 27001 and NCA ECC.
• Conducted PT on web applications, Mobile and API by using
different tools.
• Supported the creation and maintenance of security policies,
procedures, and compliance documentation.
• Participated in internal audits and gathered evidence for
regulatory compliance (e.g., SAMA, NCA, MSB).
• Prepared documentation for Minimum Security Baseline (MSB)
reviews and compliance verification.

Managing complete security for the organization; performing Web application, IOS
Applications and Configuration audits periodically.
• Perform manual Application Vulnerability assessment and Penetration testing.
• Successfully worked on Web Applications as per OWASP standard based on various
platforms like java, aspx, php, jsp.
• Identifying vulnerabilities in the application and providing recommendations on how the
security posture of web applications can be improved and submitting as documented
report.

• Managing complete security for the organization; performing
Web application, IOS Applications and Configuration audits
periodically.
• Perform manual Application Vulnerability assessment and
Penetration testing.
• Successfully worked on Web Applications as per OWASP standard
based on various platforms like java, aspx, php, jsp.
• Identifying vulnerabilities in the application and providing
recommendations on how the security posture of web
applications can be improved and submitting as documented
reports.

RESPONSIBILITIES
• Design, develop, and deploy Appian applications to meet business requirements, ensuring high performance, scalability, and reliability.
• Customize Appian objects including process models, SAIL interfaces, expressions, rules, and integrations to create efficient and user-friendly applications.
• Implement best practices for Appian development, including design patterns, code reusability, and optimization techniques to enhance overall system performance.

• Worked as Software Developer before transitioning into
Cybersecurity.
• Gained strong secure
SDLC.
• Developed foundational knowledge of architecture
and design.