Muhammad Saad Bilal

• Administer Identity & Access Management (IAM) for 1, 000+ users across 250+ enterprise and SaaS
applications, enforcing least-privilege, RBAC policies, and segregation of duties.
• Manage and audit role assignments, permission sets, and access policies; conduct monthly access reviews
to detect and remediate violations and orphaned accounts.
• Administer and support core security and IT platforms: Fortinet firewalls, Google Workspace Directory,
1 Password (PAM), KnowBe4 (security awareness), GitHub, Jira, and Slack.
• Implement and manage MDM solutions to enforce endpoint security policies, device compliance, and remote
wipe capabilities across the organization.
• Oversee secure onboarding and offboarding workflows, ensuring zero-delay provisioning/revocation and
preventing unauthorized access residue.
• Analyze suspicious access patterns and policy violations; assist with security event investigation and
access-related incident response.
• Maintain audit-ready IT and security documentation aligned with ISO 27001 and NIST controls; support
compliance monitoring and internal audit readiness.
• Drive security hygiene initiatives and access awareness across cross-functional teams to reduce insider risk
and operational security gaps.

• Conducted information security audits for government and enterprise clients aligned with ISO 27001, NIST,
and NIA Qatar frameworks; assessed logging, access controls, and monitoring mechanisms.
• Performed vulnerability assessments, analyzed findings, and issued structured remediation guidance to
reduce attack surfaces across client networks.
• Evaluated incident response processes, forensic readiness, and security governance maturity across
multiple client environments.
• Developed and reviewed security policies covering access control, risk management, and incident handling;
designed a flexible IT Audit Plan improving consistency across engagements.
• Delivered security awareness training that contributed to a 20% reduction in client-reported security
incidents.