Fahad Al-Dossary

Develop frame work, approach and policies for the Cybersecurity Risk Management in accordance with the
global best practices and Information Security Risk Management Standards (NCA, DGA, ISO 27005, ISO 31000,
NIST) and ensuring the effective and efficient implementation; to ensure coherence and consistency in the
execution of relevant activities and practices. Develop the Risk Management strategy to include types and
levels of acceptable cybersecurity risks, review and enhance it regularly to protect the Information Technology
systems and data that support. Develop and work on Third-party Risk Management strategy to include types
and levels of acceptable cybersecurity risks, review and enhance it regularly to protect the Information
Technology systems and data that support
Key achievements
• Maintain the Cyber Security Risk Management Framework of BSF for addressing the overall approach for
handling Cyber Security risks and managing them in a methodological manner
• Responsible to conduct or manage penetration testing and risk assessment activities to identify and manage
cyber security risk for Application and Infrastructure
Responsible to develop, maintain and implement cyber security architecture
• Responsible to ensure that cyber security architecture is reviewed and implemented in all technology projects
and initiatives
• Identify the critical assets of the bank and ensure implementation of risk identification and management
strategies for these critical assets
• Responsible to be involved in all stages of technology projects to ensure that cybersecurity is adequately
addressed
• Responsible to identifying and managing cyber security risk for all third-party technology engagements and all
cloud computing engagements
• Responsible for coordinating and managing all independent third-party engagements for penetration testing
and risk assessment.
• Manage all audit activities weather internal or external on cyber security risk management
• Identify and maintain all KRI and KPI for on cyber security risk management
• Identify, implement and maintain cyber security risk management mandates and compliance requirements from
regulatory bodies or national / international authorities
• Perform reviews or assessment for ensuring proper cyber security risk management
• Ensure that the results of cyber security review are be reported to business owner and that the Cyber security
review are subject to follow-up reviews to check that all identified issues have been addressed

network security architecture and design
infrastructure security architecture and design
Apply patch and test it
Knowledge in the best security situations for infrastructure
training and knowledge transfer to the new employee about security, network and system. responsible of risk and compliance in infrastructure and IT, have a good knowledge about the evidence and what the NCA want, also working on the new NDMO data compliance

Fireeye NX, EX, FX, CM administration
HP router and switch administrators and configuration
Aruba Wi-fi administers
Aruba ClreePass administrators
Symantec endpoint antivirus administrators
Symptoms message gateway administrators
Cisco router and switch administrators and configuration
Paloalto Traps antivirus
Paloaoto firewall
Active Directory administrators
F5 VPN administrators

Administering and maintaining HP routers and switches
Administering and maintaining Palo Alot Traps antiviruses
Administering and maintaining Palo Alot firewall
Administering and maintaining symantec antiviruses
Administering and maintaining F5 VPN
Administering the ArcSight