Heyam Omairan

• Governance, risk, and compliance: Leveraged a comprehensive understanding of cybersecurity frameworks, including NCA ECC, CMA, ISO 27001, and NIST CSF. Develop, update, and maintain policies, procedures, and guidelines that align with SADAFCO's strategic objectives while adhering to applicable laws, regulations, and industry standards.
• Risk Assessments: Identify, evaluate, and analyze potential risks that could impact the organization’s operations, assets, and reputation. Keep up to date on industry trends, emerging risks, and regulatory changes to adjust risk management practices accordingly.
• User Awareness & Education: Develop and lead comprehensive security awareness and training programs to educate employees on information security best practices, policies, and procedures.
• Cybersecurity Audits: Oversee internal and external audit processes, collaborating with auditors to document controls and compliance measures, and manage audit findings and remediation efforts.
• Cybersecurity projects: Coordinate and collaborate with cross-functional teams to execute Cybersecurity projects effectively. Liaise with external vendors, service providers, and external consultants.
• Cybersecurity Innovation: Keep up with cybersecurity trends, recommending innovative approaches and technologies to strengthen the organization's resilience against advanced threats.

• Governance, Risk, and Compliance: Applied in-depth knowledge of cybersecurity frameworks (NCA ECC, CMA, ISO 27001, NIST CSF) to develop and maintain policies aligned with SADAFCO's goals and industry standards.
• Incident Response: Collects and analyses digital evidence and investigates cybersecurity incidents to derive useful information to mitigate system and network vulnerabilities as first responder.
• Vulnerability Assessment: Performs vulnerability assessments of systems and networks. Identifies where they deviate from acceptable configurations or applicable policies.
• Threat Management: Proactively searches for undetected threats in networks and systems, identifies their Indicators of Compromise (IOCs), and recommends mitigation plans.
• User Awareness & Training: designing and executing cybersecurity awareness initiatives, including training programs, workshops, and simulations, to enhance employees’ understanding of security protocols and reduce organizational risk.

- Liaise with clients and stakeholders to define project requirements, scope and objectives.
- Identify potential change, areas of improvements and recommend solutions that deliver value to stakeholders.
- Evaluate information gathered from multiple resources, decompose high level information into details.
- Create and maintain comprehensive documentation (Business cases, project charters, BRDs...etc.)
- Act as the point of contact and communicate project status adequately to all participants.
- Monitor and track project's progress and handle any issue that arise.

1. Maintain and monitor the back-end of sales-system to ensure system's efficiency, avoid misuse/errors and solve problems accordingly.
2. Planning sales' journey plans, defining channels' promotions and applying customers' credits.

Developed web application and back-end database for cab booking company