سعيد الشهراني

• Led enterprise risk management at TETCO, developing and
maintaining risk frameworks to support strategic decision
making and regulatory compliance.
• Improved executive oversight through enhanced board-level risk
reporting and organizational threat visibility.
• Risk reporting to Risk committee enhancements, improving
executive visibility into organizational threats.

An Enterprise Risk Manager is responsible for identifying, assessing, and managing risks that could impact an organization’s strategic goals. They develop risk management frameworks, ensure compliance with regulatory requirements, and work closely with senior leadership to mitigate potential threats. Their role includes analyzing risk data, maintaining risk registers, and promoting a risk-aware culture across the organization.

An Enterprise Risk Manager is responsible for identifying, assessing, and managing risks that could impact an organization’s strategic goals. They develop risk management frameworks, ensure compliance with regulatory requirements, and work closely with senior leadership to mitigate potential threats. Their role includes analyzing risk data, maintaining risk registers, and promoting a risk-aware culture across the organization.

• Improved staff capabilities by developing training
material tailored to local troubleshooting and IT
policies.
• Enhanced network performance by overseeing the
switch from Cisco to Huawei systems at King Salman
Base.
• Increased network reliability by managing Active
Directory and Exchange administration.
• Improved user experience and system protection by
providing technical support and deploying security
tools.
• Maintained stable operations at RSNF by leading the
upkeep of critical network infrastructure.

• Developed a zero-trust implementation roadmap, aligned
with evolving national directives
• Achieved early detection of security gaps by introducing
threat modeling for digital services.
• Reached 90% compliance with national cybersecurity
standards by leading coordination on a major project with
PWC.
◦ Increased regulatory compliance score to 78% in 2022 by
aligning teams with required controls.
◦ Strengthened protection of key systems by applying
national security frameworks, including for Musaned.
◦ Reduced audit issues by launching a quarterly review and
response plan starting May 2021.
◦ Improved system access security by selecting a
professional identity management solution.
◦ Raised cybersecurity awareness across departments by
rolling out a company-wide training program in 2021.
◦ Ensured consistent cybersecurity practices by managing
the review and approval of IT policies and procedures.
◦ Led a data quality audit across departments, fixing 85%
of key reporting issues.

• Lowered pressure on senior support teams by resolving
60% of Level 1 technical issues.
• Improved change control effectiveness by managing the
entire change lifecycle and working with ITSM teams.
• Increased team output by reorganizing workflows and
redistributing tasks.
• Raised governance quality by developing, integrating, and
auditing IT and business processes.
• Supported strategic alignment by launching awareness
efforts and KPI-based performance tracking.
• Strengthened incident response by introducing structured
event management procedures for NOC operations.
• Reduced service delays by defining service tiers to prioritize
technical support and improve SLA compliance.