Imad Aldhfiri, Head of Cybersecurity Risk Monitoring

Imad Aldhfiri

Head of Cybersecurity Risk Monitoring

Saudi Aramco

Location
Saudi Arabia - Dammam
Education
Master's degree, Computer Science
Experience
12 years, 7 Months

Share My Profile

Block User


Work Experience

Total years of experience :12 years, 7 Months

Head of Cybersecurity Risk Monitoring at Saudi Aramco
  • Saudi Arabia - Eastern Province
  • My current job since October 2018

- Responsible for establishing a vision and strategy for the risk monitoring function to ensure team effectiveness.

- Lead a team of experts with the objective to assess, track, monitor, and manage cybersecurity risks across the global enterprise.

- Monitor and report the company’s and its affiliate's information security risk profile in accordance with the risk appetite to achieve optimal balance between business risk and opportunities.

- Lead and manage top corporate risk across the enterprise and maintain a global risk register

Cyber Security Analyst at Saudi Aramco
  • Saudi Arabia - Eastern Province
  • July 2016 to September 2018

Severed as a risk officer with tracking record of improving overall cybersecurity risk management efforts across the company through conducting high-profile risk assessments and security architecture for major initiatives and projects. Managed all the aspect of monitoring, maintain, and presenting Information Security Risk Profile for the organizations and the company security posture to key stakeholders

Risk Professional at Saudi Aramco
  • Saudi Arabia - Eastern Province
  • July 2015 to July 2016

Spearheaded all aspects of risk management efforts enterprise-wide working in partnership with administrative staff and executive leadership. Gathered feedback to identify, analyze, and plan risk mitigation procedures and reported key findings to management to drive compliance and ERM implementation

IT System Analyst at Saudi Aramco
  • Saudi Arabia - Eastern Province
  • October 2013 to June 2015

- Championed relationships with management to provide them with tools for proper decision making.

- Performed risk assessments to gather metrics and security findings for reporting and key decision making to reduce risk, elevate cybersecurity infrastructure to secure assets, financials, critical data, and intellectual property.

- Coordinated and prioritized risk-driven IT projects in conjunction with cross-functional teams and stakeholders per business requirements and long-term needs; owned IT risk security adjuster tasks to mitigate risk.

International Peer Mentor at California Lutheran University
  • United States
  • January 2010 to January 2011
Information Technology Supporter at Energy Power Service
  • Saudi Arabia - Dammam
  • November 2008 to May 2009
Technical Support and Help Desk at Saudi Aramco
  • Saudi Arabia - Eastern Province
  • July 2008 to October 2008

Education

Master's degree, Computer Science
  • at California Lutheran University
  • August 2013

•Graduated with a high GPA of 3.8 out of 4 with HONORS.

Bachelor's degree, Computer Information System
  • at California Lutheran University
  • December 2011

•Graduated from California Lutheran University in December of 2011. •Graduated with a GPA of 3.6 out of 4 with HONORS. •Been listed in the (Dean's List) during the Spring Semester of 2011. .

Bachelor's degree, Information Technology System Support
  • at Jubail Industrial College
  • October 2008

•The main language in the college is English and it is a technical college with three years Associated Degree. •Graduated with a GPA of 3.7 out of 4. •Been awarded from the college as the “Top 1 student in my major with Highest GPA” •Been nominated to get full scholarship paid by my government to get higher studies in my field or related one as a reward for my achievements.

Bayt Tests

IQ Test
IQ Test
Score 106%

Specialties & Skills

Information Security Management
IT Risk
Leadership
Enterprise Risk Management
Cyber Security
Leadership, Team Building, Motivation, Communication, Ability to work under pressure
Knowledge of Java and Python Programming, Software Development Life Cycle (SDLC),UML,Design Patterns
Computer Related Skills: MS Office (Word, Excel, PowerPoint, Visio, MS Project and MS Outlook)
Professional Counseling, Education Initiatives, Relationship Management
Knowledge of Windows and Mac OSX, Linux/Unix Environments and Internet Applications
IT Administration, Technical Management, Technical Policies and Procedures, Technical Support
Analytical Ability, Critical Thinking, Decision Making and Problem Solving, Time Management
Databases Application: MS Access, MySQL and Oracle SQL Developer, Excellent Typing skills 60-65 WPM
Network Security
Information Security
Risk Assessment and Governance
Risk Management
Cybersecurity
Team Management
Governance, Risk and Compliance (GRC)
People Management
Leadership
Project Management

Languages

Spanish
Beginner
Arabic
Expert
English
Expert

Memberships

CompTIA
  • Security+ Member
  • February 2012
ISACA
  • Member
  • October 2016

Training and Certifications

Leadership Principles (Training)
Training Institute:
Harvard Business School
Date Attended:
September 2019
Certified Information Security Manager (CISM) (Certificate)
Date Attended:
August 2018
Valid Until:
August 2021
Motivating Employees (Training)
Training Institute:
SA Leadership Center
7 Habits for Highly Effective People (Training)
Training Institute:
SA Leadership Center
Problem Solving (Training)
Training Institute:
SA Leadership Center
Project Management Essentials (Training)
Training Institute:
SA Leadership Center
Executive Management Presentations (Training)
Training Institute:
SA Leadership Center
GIAC Systems & Network Auditor (GIAC/GSNA) (Certificate)
Date Attended:
November 2017
Valid Until:
December 2021
Certified in Risk and Information Systems Control (CRISC) (Certificate)
Date Attended:
June 2017
Valid Until:
June 2020
Certificate in Information Security Management Principles (Certificate)
Date Attended:
May 2016
Valid Until:
May 2019
Enterprise Risk Management Certified Professional (ERMCP) (Certificate)
Date Attended:
September 2015
Valid Until:
September 2018
GIAC Security Essentials (GIAC/GSEC) (Certificate)
Date Attended:
June 2015
Valid Until:
June 2019
CompTIA Advance Security Practitioner (Certificate)
Date Attended:
December 2014
Valid Until:
December 2017
Cisco Certified Entry Networking Technician Certificate (Certificate)
Date Attended:
August 2014
Valid Until:
August 2017
IT Risk Management (Training)
Training Institute:
Saudi Aramco
Duration:
40 hours
Huawei Firewall Operation & Maintenance (Training)
Training Institute:
Huawei
Date Attended:
March 2014
Duration:
40 hours
Cisco ICND 1 Training (Training)
Training Institute:
Cisco
Date Attended:
April 2014
Duration:
40 hours
PKI (Public Key Infrastructure) and HSM (Hardware Security Module) (Training)
Training Institute:
Microsoft
Date Attended:
October 2014
Duration:
40 hours
Technical Support and IT Services Training (Training)
Training Institute:
Saudi Aramco
Date Attended:
May 2008
CompTIA Security+ Certificate (Certificate)
Date Attended:
December 2011
Valid Until:
January 2012

Hobbies

  • Travelling and Reading
    Some of my Accomplishments during my studies were: 1. I was awarded as the Top 1 student in Jubal Industrial College 2. As a result of the previous achievement, I was nominated to study abroad and pursue my education to obtain Bachelor and Masters degrees. 3. I graduated with high GPA (dean list) (Cum Laude) during my bachelor program studying Computer Information system.