Mohannad Hlayel

- Developed business strategic plans and budgets; and measured financial performance.

- Established strong business relationships with regional and international solution vendors and service providers.

- Supervised and participated in the creation of the company’s service portfolio.

- Supervised and participated in the sales process and established strong ties with customers.

- Planned and led the execution of various projects, including web application security, risk assessment, vulnerability management, system hardening and architecture review.

- Advised customers’ senior and middle management on information security strategies, risks and control implementation and operation.

- Assisted customers at integrating secure coding practices into software development lifecycle.

- Developed training material and delivered several training courses.

- Developed training material and delivered several cyber security training courses.

- Delivered several training courses, including:
+ Certified Information Systems Security Professional (CISSP).
+ ISO 27001 Implementation.
+ Certified Information Systems Auditor (CISA).

- Carried out security policy and procedure development, gap analysis, business impact analysis and security risk assessment for customers in oil, telecommunication, financial and governmental sectors.

- Planned and carried out internal audits and security reviews.

- Participated in the development of business continuity and disaster recovery plans.

- Participated in designing, testing and implementing various technical security controls.

- Developed information security training programmes and delivered security awareness sessions.

- Helped customers identify security requirements and acquire solutions to address identified requirements.

- Participated in creating the service portfolio and prepared technical and financial proposals for several offerings.

- Assisted top management in creating information security strategic plans to support business strategy.

- Spearheaded the establishment & implementation of ISO 27001 ISMS, developing policies and procedures, carrying out risk assessments, supervising the implementation of controls and measuring performance.

- Carried out vulnerability scans and actively participated in vulnerability remediation.

- Engaged IT teams and end-users to evaluate, design and implement various technical security solutions.

- Acted as an information security SME providing advice on information security and compliance issues.

- Participated in the preparation of RFPs and worked closely with procurement to acquire security products and services.

- Designed and presented solution propositions to middle and senior management.

- Led IT operations management covering the functions of infrastructure, help desk and application management.

- Formulated annual IT plans, budgets and performance reports.

- Worked closely with financial dept., procurement and vendors to acquire products and services.

- Filled the role of system & network administrator managing Windows and Linux based servers, e-mail and web services, network devices and security solutions.

- Introduced Active Directory domains, dynamic IP addressing, firewalls, private IP addressing and proxy servers.

- Significantly improved network performance by upgrading the hub-based network into a switched, multi-layered network.

- Reduced troubleshooting time by creating and maintaining accurate and comprehensive documentation for servers, network devices and network connections.

- Designed, implemented and administered e-mail, DNS, DHCP, Web and File Servers.

- Installed, configured and maintained the university’s firewall, switches and routers.

- Monitored and analysed server and network performance.