Fahad Alarifi, CISA, ISO LA & LI, PMP

- Establish Information Security Unit
- Oversee the organization information security
- Develop and ensure implementation of Information Security Policies and Procedures
- Establish Information Security Awareness Campaign.
- Deliver Information Security Awareness Sessions.
- Implement Information Security Management System
- Drive the organization towards ISO27001 Certification
- Preform risk and vulnerability assessment
- Set Information Security requirements
- Manage penetration test and vulnerability assessment

- Day-to-day implementation/maintenance/development of security policy and procedure.
- Monitoring the security in the production environment -application, system, and networks security violation-
- Security Auditing, focus on all possible controls and audit checklists in the various technical and business areas of the intended Tadawul.
- First level of security incident response
- Report security breach upon detection to Tadawul management
- Monitor and administer systems security, SOC, Guarduim, DLP.
- Assure Tadawul members compliance.
- Develop and update security policies.
- Implement and maintain ISO 27001 standards and Certification
- Develop and deliver security awareness.

- Collects and analyses relevant information; prepares a report of observations, conclusions, and recommendations to the Internal Audit Head; and presents the report and work papers to the Internal Audit Head for review.
- Assist in the preparation of internal audit review work plans which are specifically designed to meet the objectives approved in the Internal Audit Department schedule.
- Schedule fieldwork with the relevant department in coordination with the Internal Audit Head to minimize conflict with other department activities.
- Prepare relevant working papers in accordance with internal and generally accepted auditing standards.
- Coordinate the development of the work plan with the external auditors when an engagement is to be relied upon by the external auditors.
- Proficient in the use of spreadsheet, database, and word processing software.