Seham GadAllah, Information Security and Compliance Sr. Manager

Seham GadAllah

Information Security and Compliance Sr. Manager

Raya Data Center

Lieu
Egypte
Éducation
Master, MBA
Expérience
21 years, 2 Mois

Partager Mon CV

Empêcher usager


Expériences professionnelles

Total des années d'expérience :21 years, 2 Mois

Information Security and Compliance Sr. Manager à Raya Data Center
  • Egypte - Le Caire
  • Je travaille ici depuis janvier 2012

- Plan, Establish, implement, operate, Maintain and improve Raya Data Center Service Management System (SMS) ( Implement ISO 20000:2011 and achieve the certification for Raya Data Center)
- Develop ISO 20000 awareness program and technical training for all employees
- Manage the Change Management process
- Manage the Capacity Plan Process
- Manage the problem Management process
- Plan, Establish, Implement, Operate, Maintain and improve the ISMS (After Achieving the ISO 27001:2005 certification in 2009)
-Develop and oversee implementation of the organization’s information security policies and procedures
-Implementation of ISO 20000
- ISO 9001 implementations, monitoring, and continual improvement
- Plan, implement, and test the organization’s disaster recovery and business continuity and availability plans
-Develop information security awareness programs and training to all employees
-Perform information security risk assessments and ensure auditing of information security processes
-Monitor internal control systems to ensure that appropriate information security are maintained
-Monitor changes in legislation and accreditation standards that affect information security
-Manage security and operations incidents to minimize business impact
Manage the Information Security Services for external customers ( security assessment, penetration testing, ISO 27001 consultation

Security & IT Consultant à Raya Holding
  • Egypte - Le Caire
  • avril 2008 à décembre 2011

-Manage the network services and the help desk system teams
-Prepare and follow up the IT budget plan. Follow up the procurement processes, support contracts renewal.
-Involved in a variety of IT activities, including project management, systems development, as well as technical duties.
-Develop and oversee the IT systems and processes
-Helping in coaching and developing the IT team
-Assistance to the Technical Support teams in the deployment of agreed information security technology solutions
-Maintain and improve the ISMS (After Achieving the ISO 27001:2005 certification in 2009)
-Develop and oversee implementation of the organization’s information security policies and procedures

Security & Control Manager at e-finance à e-finance
  • Egypte - Le Caire
  • avril 2007 à mars 2008

e-finance Data Center
- Procure the Data center equipment (Racks, Servers, Network Equipment)
- Supervise the installation and configuration of the data center equipment

Data Center Supervisor à Raya Telecom
  • Egypte - Le Caire
  • décembre 2006 à mars 2007

Data Center Supervisor and Security Consultant

Network and system administrator à The Egyptian Universities Network - Supreme Council of Universities
  • Egypte - Le Caire
  • décembre 1993 à juillet 1997

System Administrator (VMS, Unix)
Network Administrator (Cisco routers and switches)

Éducation

Master, MBA
  • à Eslsca
  • décembre 2013
Master, Computer and System Engineering
  • à Ain Shams University - Faculty of Engineering
  • juin 2000

Congestion Control in Wide Area Networks

Baccalauréat, Computer and Automatic Control - Electical Engineering
  • à Ain Shams University - Faculty of Engineering
  • août 1993

Specialties & Skills

information systems management
Information Systems Development
Information Security Management
ISO 27001
Managed Security Services

Langues

Arabe
Expert
Anglais
Expert

Formation et Diplômes

GSEC (Certificat)
Date de la formation:
April 2004
Valide jusqu'à:
March 2007
ITIL V3 (Certificat)
Date de la formation:
May 2013
ISO 20000 Practitioner (Certificat)
Date de la formation:
June 2013
ISO 27001:2005 Lead Auditor (Certificat)
Date de la formation:
March 2010
Valide jusqu'à:
February 2013
CISSP (Certificat)
Date de la formation:
May 2005
Valide jusqu'à:
May 2014

Loisirs

  • Walking, Cooking, Sports