Mohd shah Ahmad

Led the end-to-end cybersecurity and IT function for a retail organisation, designing and implementing an information security management system aligned with ISO 27001 standards. Conducted vulnerability assessments, cyber risk reviews, and produced executive-level security reports and treatment plans. Implemented DMARC, SPF, and DKIM email authentication controls, eliminating domain spoofing exposure. Managed IT infrastructure including networks, endpoints, and systems to ensure business continuity. Delivered internal cybersecurity awareness training to staff at all levels. Served as primary incident response coordinator for all security events. Drove digital transformation initiatives including e-commerce development, SEO strategy, and data-driven marketing systems.

▸ Designed and implemented an ISMS aligned with ISO 27001 standards and organisational risk appetite
▸ Developed the company cybersecurity strategy including policies, procedures, and controls for critical
digital assets
▸ Conducted ongoing vulnerability assessments and cyber risk reviews, producing executive-level treatment
plans
▸ Implemented DMARC, SPF, and DKIM email authentication controls — eliminating domain spoofing
exposure
▸ Led internal cybersecurity awareness programmes, developing training materials for staff at all levels
▸ Served as primary incident response coordinator, investigating and remediating all security events
▸ Managed IT infrastructure: networks, endpoints, and systems ensuring business continuity and data
integrity
▸ Drove digital transformation including e-commerce development, SEO strategy, and marketing automation

Managed all technology systems and information security controls including access management and data protection. Maintained the information asset register and ensured compliance with security procedures. Implemented digital marketing and online security strategies that improved brand visibility and reduced exposure to digital threats. Managed operational performance, staff scheduling, inventory, and customer relations across technical and business functions.

▸ Managed all technology systems and information security controls including access management and data
protection
▸ Maintained information asset register and ensured compliance with applicable security procedures
▸ Implemented digital marketing and online security strategies improving brand visibility and reducing
digital risk
▸ Managed operational performance, staff scheduling, inventory, and customer relations