Mamdoh Alzhrani, InfoSec MSc, GCIH, CEH, Sec+, Information Security Monitoring and incident Response Manager

Mamdoh Alzhrani, InfoSec MSc, GCIH, CEH, Sec+

Information Security Monitoring and incident Response Manager

National Commercial Bank - NCB

Location
Saudi Arabia - Jeddah
Education
Master's degree, Computer System Security
Experience
15 years, 11 Months

Share My Profile

Block User


Work Experience

Total years of experience :15 years, 11 Months

Information Security Monitoring and incident Response Manager at National Commercial Bank - NCB
  • Saudi Arabia - Jeddah
  • My current job since August 2013

Build a SoC and maintain Incidents management

Head Cyber Security Inte. at National Commercial Bank - Alahli Ncb
  • Saudi Arabia - Jeddah
  • My current job since February 2017
Risk Assessment Specialist at Alinma Bank
  • Saudi Arabia
  • January 2011 to January 2012

Risk Assessment Specialist 2011-2012
Alinma Bank, Riyadh, KSA

-Security &Risk management: • Main objectives vary from assessing raising daily external and internal risks to producing quality work that helps in the process of maintaining the
enterprise's security requirements.
• Monitoring systems and applications logs: Security logs.

-Security Awareness: • Increase the security and continuity awareness levels for all the bank's
employees by using emails and training sessions.
• Managing and Operating An awareness program "e-learning" system.

-Internal IT Audit: • Were able to coordinate, manage and assess internal and external
audits requirements towards IT systems and standard.

-Policies&procedures: • To ensure compliance with external requirements from regulators, industry
organisations, and security standards.
• Annual updates of organisational and technical policies and procudres.
• Developing new security document (policy, procedure, standard and guideline) based on needed.
• Maintaining/developing the enterprise's security documents (policies,
standards, guidelines and procedures) based on need.

-Co-operator of PCI DSS Card Scan: • Main task were to managing the process of PCI card scanning and update the scope of PCI DSS on the enterprise assets.

Administrator at Internet WebHosting
  • Saudi Arabia - Jeddah
  • January 2005 to January 2009

Used to design and implement AQL, HTML, PHP, Java and other coding to websites while administrating more than 10 major websites. Also, Supporting clients in troubleshooting and managing Application.

Education

Master's degree, Computer System Security
  • at Sauth Wales University -Glamorgan
  • January 2010

University of Glamorgan, Cardiff, UK 2009-2010 MSc in Computer System Security

Bachelor's degree, Computer Science
  • at King AbdulAziz Uni
  • December 2006

King Abdul AzizUniversity, Jeddah, KSA 2003-2006 BSc in Computer Science

Specialties & Skills

Science
Risk Assessment
Management
Awareness
SECURITY
Security Risk Assessment
Security Project Management
Security Incident Handling
Security monitoring
Risk Management
Security Governance
Security Audit
Security Threat Analysis

Languages

Arabic
Beginner
English
Expert

Training and Certifications

GCTI (Certificate)
GMON (Certificate)
GCIH (Certificate)
CISM (Certificate)
Certified Ethical Hacker (Training)
Training Institute:
EC-Council - CEH
Date Attended:
March 2013