mohammed alaa borji, CISO

mohammed alaa borji

CISO

Confidentiel

Lieu
Arabie Saoudite - Riyad
Éducation
Master, Master in New Technologies of Computer System Dedicated
Expérience
19 years, 8 Mois

Partager Mon CV

Empêcher usager


Expériences professionnelles

Total des années d'expérience :19 years, 8 Mois

CISO à Confidentiel
  • Arabie Saoudite - Riyad
  • Je travaille ici depuis avril 2018
Senior Information Security Engineer, à Tamkeen
  • Arabie Saoudite - Riyad
  • janvier 2014 à avril 2018

Client: Technical and vocational training corporation (TVTC)
 Provides vision, technical design and monitoring of security solutions to meet industry best practices
and legal, compliance requirements.
 Designs, implements and tests technical solutions to ensure compliance with business continuity and
disaster recovery requirements.
 Audits and implements technical documentation of information security solutions. Internal audit ISO
27001
 Develops and implements technical security policies, procedures and guidelines for multiple
platforms and systems including network devices, servers, and workstations. Implements controls to
ensure their compliances.
 Work with project teams to understand security requirements for applications and SIEM solutions
and determine how best to implement them.
 Technology architecture and management of infrastructure components such as F5 load balancers,
Cisco switches and routers, Next generation firewalls, VPNs and email security systems.
 Consulting for other Tamkeen’s clients ( COE, SSS, Takamol, HRDF, ...)

Information Security Engineer analyst, à tvtc
  • Arabie Saoudite - Riyad
  • septembre 2012 à janvier 2014

Client: Technical and vocational training corporation (TVTC) And Ministry of Labor (MOL)
 Monitor system logs, SIEM tools, and network traffic for unusual or suspicious activity
 Investigate and resolve security violations by providing postmortem analysis to illuminate the issue,
and identify causes, possible solutions, and preventative measures
 Respond to, and when appropriate, resolve and/or escalate security incidents
 Assist and train team members in the use of cloud security tools and the resolution of security
issues
 Analyze potential impact of new threats and exploits and communicate risks to relevant business
units
 Collaborate with the DevOps team to proactively identify and fix security flaws and vulnerabilities.

Information security analyst à CBBC
  • Tunisie - Tunis
  • janvier 2008 à septembre 2012

Client: Biotechnology Center Borj Cedria and Tunisian National Agency for computer security
 Detect, investigate and recover from security incidents as well as assisting with incident response
plans and root cause analysis
 risk assessments, vulnerability management, penetration testing and patch management
 Conception and Building a Security Operation Center
 Internal auditor ISO 27001,
 Develop Information Security Plans and Policies.
 Firewall and IPS administrator,
 SIEM administrator,
 Datacenter and infrastructure operation.

System engineer and Technology Coach, à ISET TATAOUINE
  • Tunisie
  • septembre 2004 à janvier 2008

Client: Higher Institute of Technological Studies of SFAX and TATAOUINE
 Off-site (in-house) training for Education Technology faculty members
 Providing training for students and personnel in the ministry.
 Maintain and manager servers
 Installing and configuring Security Open source tools (firewall, SIEM, server’s status monitoring
tools...)

Establishment of an eLearning platform that is within the scope of cooperation with the Haute
Ecole Robert Schuman Belgium

Éducation

Master, Master in New Technologies of Computer System Dedicated
  • à ENIS
  • janvier 2007

Master in New Technologies of Computer System Dedicated National School of Engineers of Sfax (ENIS) (between 2005 and 2007 ) "Automatic Detection and reconstruction of contours in the technical documents: mapping"

Baccalauréat, Software Engineer at ENIS
  • à ENIS
  • juin 2004

Software Engineer at ENIS and IPEIS Preparatory Institute of Study Engineers of Sfax(IPEIS) National School of Engineers in Sfax (ENIS) (between 1998 and 2004 ) "Design and implementation of an application of compression, decompression, encryption and decryption of images using EZW for the compression, AES encryption and C + + programming"

Specialties & Skills

FORMATION INFORMATIQUE
Teaching
Network Security
Security Analysis
StoneSoft UTM
information security
Penetration test
alient vault USM
Paloalto fw
Vulnerability management
iso 27001
soc monitoring

Langues

Arabe
Langue Maternelle
Français
Langue Maternelle
Anglais
Expert

Adhésions

Ajst
  • formatteur
  • June 2000
REGIM
  • membre
  • September 2004
Organization of NGN'S Next Generation Networks and Services
  • Publicity and Dissemination chair
  • December 2011

Formation et Diplômes

NSE3 (Certificat)
Date de la formation:
May 2018
ISO 27001 LI (Certificat)
Date de la formation:
November 2020
Iso 27001 LA (Certificat)
Date de la formation:
January 2021
ITIL (Formation)
Institut de formation:
ITIL fondation v3
Date de la formation:
April 2015
Palo Alto Networks ACE (Certificat)
Date de la formation:
August 2016
Palo Alto Networks 201-205 (Formation)
Institut de formation:
Palo Alto Networks
Date de la formation:
August 2016
Durée:
40 heures
Stone-Soft utm (Certificat)
Date de la formation:
November 2012
Valide jusqu'à:
November 2012
Cisco Certification CCNA (Certificat)
Date de la formation:
February 2011
Valide jusqu'à:
June 2011

Loisirs

  • travelling
  • Sport
  • watching movies