Mohammed ALSUBAYT

• Lead and manage compliance activities across NCA cybersecurity frameworks (ECC, CCC, TCC,
CSCC, OSMACC, and DCC), assess the organizations cybersecurity posture, and ensure alignment
with ISO/IEC 27001 and NIST CSF 2.0.
• Perform cybersecurity risk assessments, develop mitigation strategies, maintain risk registers, and
support risk treatment planning based on NCA Cybersecurity Risk Management requirements and
ISO/IEC 27005.
• Develop, review, and enforce cybersecurity policies, standards, and procedures aligned with
organizational objectives, regulatory requirements, and cybersecurity governance best practices.
• Support internal and external audits by coordinating evidence collection, validating control
implementation, and tracking remediation activities.
• Facilitating and supporting internal and external audits, including evidence collection and audit
follow-ups.
• Communicate cybersecurity risks, compliance status, and remediation progress to business
stakeholders and support strategic cybersecurity initiatives.
• Support cybersecurity awareness initiatives and promote security best practices across the
organization.
• Track corrective actions and compliance remediation plans to support regulatory readiness and
improve overall cybersecurity posture.

• Establishing and enforcing corporate governance policies and frameworks.
• Ensuring adherence to local and international legal and regulatory standards.
• Designing and implementing compliance policies and procedures.
• Delivering training and awareness sessions on compliance obligations.
• Promoting GRC awareness among employees and stakeholders.
• Compiling and presenting GRC reports to senior management and the board.

o Analyzing security logs for unusual behavior and potential security problems.
o Responding promptly to cybersecurity incidents, conducting investigations to identify the root cause, containing the incident, and implementing remediation measures to prevent recurrence.
o Documenting security incidents, investigations, and remediation activities in detail, and preparing reports and presentations to communicate findings, recommendations, and metrics to management and stakeholders.
o Conducting regular risk assessments to identify potential risks.
o Developing and monitoring key performance indicators (KPIs) for GRC activities.
o Developing and implementing corporate governance policies and frameworks. o Conducting periodic reviews and updates of governance structures and processes. o Conducting risk assessments and developing risk mitigation plans. o Ensuring compliance with local and international laws, regulations, and standards. o Developing and implementing compliance policies and procedures. o Providing training and awareness programs on compliance requirements. o Raising awareness of GRC issues among employees and stakeholders. o Preparing and presenting GRC reports to senior management and the board

• Developed modules for data analysis and insights generation.
• Implemented machine learning and deep learning techniques to solve complex problems.
• Redesigned application interfaces to enhance user experience and functionality.