نايف القحطاني

• Active board member contributing to strategic decisions and voting on key resolutions.
• Developed and executed marketing strategies, improving operational efficiency by 20%.
• Managed the marketing budget and KPIs, achieving notable improvements in outreach.
• Led recruitment efforts, attracting qualified volunteers and conducting interviews.
• Designed and delivered impactful presentations on achievements to stakeholders.
• Oversaw social media platforms, producing visual and multimedia content to expand reach.

• Conducted audits on Shared Folder and OneDrive systems to ensure compliance and secure data management.
• Updated and aligned the Risk Control Matrix (RCM) with evolving regulatory requirements.

• Performed comprehensive audits on key aviation systems: Q5 (Incident Reporting), ALS & ACP (Licensing), ARS (Aviation
Regulations), RBS (Revenue), Oracle HR, SSCM (Microsoft Updates), and cybersecurity platforms (SIEM, Tenable, Trellix
Antivirus).
• Delivered professional presentations to management and facilitated multiple (3-4) kick-off and closure meetings with audit client
management. Coordinated and organized meetings with relevant stakeholders (both virtual and in-person) and discussed audit findings
directly with client management.
• Represented the Authority as Ambassador for Cambodia and Guinea-Bissau at the Future Aviation Conference 2024.
• Supported the follow-up process, achieving significant progress in closing audit findings.
• Responded to urgent management requests with precision and efficiency.

• Conducted IT infrastructure and network audits.
• Reviewed Business Continuity Planning (twice, as mandated by SAMA).
• Entered and reviewed over 250+ SAMA-raised findings in TeamMate, reducing resolution time from 5 business days to just 2
days. Improved regulatory response efficiency by 60%. Enhanced

• إعداد وتنفيذ خطة التدقيق السنوية استنادًا إلى تقييم المخاطر، مع متابعة تنفيذ توصيات التدقيق ومراقبة نتائجها بشكل دوري .
• إجراء مراجعات تقنية شملت البنية التحتية والأنظمة والتطبيقات، بما في ذلك تقييم ضوابط تقنيات المعلومات وتحليل الأدلة والبيانات المتعلقة بعمليات الشركة .
• تحديد الملاحظات والتوصيات وتوثيقها ومناقشتها مع الإدارات المعنية، والمشاركة في وضع خطط العمل التصحيحية ومتابعة تنفيذها  .
• تطوير أطر الحوكمة والسياسات الداخلية بما يتوافق مع الأنظمة واللوائح المهنية، وتعريف منهجية التدقيق لضمان الالتزام بالمعايير .
• تقديم رأي مستقل حول فاعلية نظم المعلومات والشبكات والأنظمة المالية وتقديم توصيات لتعزيز الرقابة وإدارة المخاطر .
• متابعة نتائج التحقيقات والتأكد من وضع الضوابط الوقائية لكشف وتقليل حالات الاحتيال أو المخاطر المستقبلية .
• إعداد تقارير التدقيق النهائية وتقديمها للإدارة العليا وأصحاب المصلحة، مع ضمان تطبيق أفضل الممارسات القياسية في عملية التدقيق .
• التنسيق مع فرق التدقيق الخارجية ودعمهم في تنفيذ عمليات التدقيق التقنية، ومراقبة المهام الموكلة لهم .
• مواكبة المستجدات التقنية والتنظيمية لتحسين إجراءات التدقيق واستباق المخاطر المستقبلية، بما يعزز جودة عمليات الرقابة والحوكمة

• Audited multiple systems and services, including: Data Centers, MySTC App, Anti-DDOS, eSIM, Enterprise Architecture, B2C/B2B
Revenue Billing Systems, and CRM platforms.
• Conducted cybersecurity compliance audits aligned with NCA and industry standards.
• Designed and improved internal audit templates; contributed to drafting the TeamMate Audit Manual.
• Delivered internal awareness sessions and training workshops (Excel, Cybersecurity).
• Spearheaded internal email campaigns to highlight the role of internal audit.
• Actively engaged in opening, fieldwork, and closing meetings to identify weaknesses and recommend improvements.
Key
• Boosted IA awareness by 40% through tailored campaigns.
• Enhanced audit efficiency by improving templates and methodologies.
• Ranked 12th out of 500 participants in the company marathon.
• Developed and presented the STC Pay Business Case to the Department Head (GM), resulting in a significant improvement of the
companys promotional effectiveness and profitability by 200%, including promotional campaigns for the app referral program and
discount promotions on STC Pay services.

• Formulated a strategic marketing plan that improved processes by 70%.
• Applied Agile methodology using Trello, which increased the teams productivity by 30%.
• Increased public awareness of business analysis practices by 150% through targeted campaigns.
• Covered events (in-person and virtual), distributed certificates, and coordinated guest speakers.
• Created digital content (posters, videos) to promote organizational initiatives.