كارتيكيان غانيسان

Currently working at DAMAC Properties, leading end-to-end implementation of ISO 27001 across data centers and group entities, with core operations in real estate.
Single-handedly drove multiple certifications including ISO standards, PCI DSS, and Saudi regulatory frameworks (ECC & CCC) for data centers.
Led enterprise-wide data privacy initiatives, implementing robust privacy frameworks and ensuring compliance across group companies.

Provide advisory and assesments based on frameworks/standards like COBIT, ITIL, GDPR, PDPL, ISO 27001 etc.
➢ Lead Internal audit engagements independently and simultaneously for diverse clientele
➢ Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies.
➢ Conduct efficient and effective IT audit procedures.
➢ Communicate complex technical issues in simplified terms to the relevant staff.
➢ Perform regular audit testing and provide recommendations.
➢ Review, evaluate, and test IT application controls and General Controls.
➢ Provide recommendations and guidance on identified security and control risks.
➢ Develop a strong understanding of business and system processes.

Worked at Paramount Computer Systems, contributing to governance, risk, and compliance (GRC) initiatives across multiple client environments.
Played a key role in implementing ISO 27001 frameworks, strengthening information security controls and organizational compliance.
Supported policy development, risk assessments, and audit readiness, ensuring alignment with regulatory and industry standards.

Implementing information security, governance, risk and compliance for IT functions; ensuring adherence to GRC Processes

IT Policy and process design, development, implementation and custodianship in line with the bank/Organization Group policies, Regulatory, Information security and Data Privacy requirements.

Drive and Manage Risk and Controls Self-Assessment and Controls Testing

Drive and Manage Internal Audits, External IT Audits, Certification Audits and Third-party Assessments

Define, monitor and report on IT-Risk & Governance KPIs and metrics in-line with IT objectives

Evaluate regularly the IT, Information security and Data Privacy risks, and maintain continued awareness of the business and risk profiles and changes in the operating environment and financial markets that may give rise to emerging risks.

Assist in IT risk mitigation efforts and defining controls, including the submission of relevant evidences to internal and external control/regulating bodies.

Managing application security, network security, Data Privacy and vendor security risk assessment

Liaising with Business Units and reviewing all information security plans for business continuity planning and IT disaster recovery

Working with DR team, maintaining department documentation, scheduling and coordinating mock recovery tests

Conducting a robust continuity exercise comprised of a table-top exercise testing overarching contingency plans

Conduct business impact analysis, risk assessments of critical systems and business functions

Implementing information security, governance, risk and compliance for IT functions; ensuring adherence to GRC Processes

IT Policy and process design, development, implementation and custodianship in line with the bank/Organization Group policies, Regulatory, Information security and Data Privacy requirements.

Drive and Manage Risk and Controls Self-Assessment and Controls Testing

Drive and Manage Internal Audits, External IT Audits, Certification Audits and Third-party Assessments

Define, monitor and report on IT-Risk & Governance KPIs and metrics in-line with IT objectives

Evaluate regularly the IT, Information security and Data Privacy risks, and maintain continued awareness of the business and risk profiles and changes in the operating environment and financial markets that may give rise to emerging risks.

Assist in IT risk mitigation efforts and defining controls, including the submission of relevant evidences to internal and external control/regulating bodies.

Liaising with Business Units and reviewing all information security plans for business continuity planning and IT disaster recovery


Conduct business impact analysis, risk assessments of critical systems and business functions

Evaluate regularly the IT, Information security and Data Privacy risks, and maintain continued awareness of the business and risk profiles and changes in the operating environment and financial markets that may give rise to emerging risks.

Assist in IT risk mitigation efforts and defining controls, including the submission of relevant evidences to internal and external control/regulating bodies.

Managing application security, network security, Data Privacy and vendor security risk assessment

Establishing and implementing company policies & procedures based on ITIL and ISO standards, governing corporate Information security

Conducting information security risk assessments and managing resolutions for information security incidents

Consulting and assisting Software Projects on Process Improvements, Risk Management, Productivity improvements, Defect Analysis, Metrics definition, Metrics planning and Metrics analysis

Managing process related facilitations and conducting audits based on CMMI DEV L5, ISO 9001, ISO 27001, ITIL & DP World QMS standards

Conducting Information security assessments and managing resolutions for information security issues

Driving and leading organization-wide implementation of CMMI

Establishing and Implementing Quality Management system, Information security Management system and IT service Management system

Conducting Internal audits and Driving external audit and assessments with respect to ISO 9001, ISO 27001, ITIL, CMMI and COBIT

Establishing and Implementing Quality Management system, Information security Management system and IT service Management system

Establishing and Implementing Process performance models for IT Projects

Conducting Internal audits and Driving external audit and assessments with respect to ISO 9001, ISO 27001, ITIL, CMMI and COBIT

Establishing and Implementing Quality Management system, Information security Management system and IT service Management system

Conducting Internal audits and Driving external audit and assessments with respect to ISO 9001, ISO 27001, ITIL, CMMI and COBIT

Create and Implement Process performance models based on CMMI high maturity practices

Establish and maintain process tailoring and project processes for IT Projects

Establishing and Implementing Quality Management system, Information security Management system and IT service Management system

Conducting Internal audits and Driving external audit and assessments with respect to ISO 9001, ISO 27001 & CMMI

Consulting and training on Quality Management systems and Information security Management system

Consulting clients for end-to-end implementation of management systems and standards