واصف صديقي

IT Governance
• Developed IT policies and procedures to guide operations, ensure regulatory compliance, and implemented governance frameworks aligning IT with organizational goals.
• Established and monitored performance metrics to assess IT services and systems effectiveness, conducting regular reviews and audits to ensure performance targets are met.
• Developed and tested business continuity plans (BCP) and disaster recovery (DR) strategies to ensure IT resilience and operational continuity.
• Engaged with stakeholders across the organization to gather IT requirements and feedback, and effectively communicated IT changes and their impacts to stakeholders at all levels.
• Ensured information systems provided robust support for senior management to facilitate effective decision-making.
• Served as secretary for the IT Steering Committee and Business Continuity Group.
• Supported and coordinated with the Department Head on capital and operational expenditure planning for the annual budget.
Cyber Security
• Developed and enforced a comprehensive cybersecurity policy to ensure compliance.
• Established and maintained an information asset register and an information risk treatment register.
• Managed incident response and incident management processes.
• Conducted vulnerability assessments and penetration testing to enhance system security.
• Delivered cybersecurity training and awareness sessions to educate users on best practices and self-protection strategies.
• Managed patch management, security information and event management (SIEM) solutions, and Kaspersky Security Center for comprehensive cybersecurity oversight.
Communication & Network
• Designed and organized system networks, ensuring network functionality through proper security measures, routing procedures, and device configurations.
• Maintained and troubleshot network infrastructure, including routers, firewalls, switches, Wi-Fi routers, and audio/video conferencing equipment, to facilitate seamless communication across branch and group locations.
• Provided technical support for network operations, ensuring efficient and reliable 24/7 data communication security.
IT Infrastructure Management
• Ensured the architecture, structure, and framework of IT infrastructure met business demands for availability, efficiency, flexibility, reliability, security, data integrity, and performance.
• Planned and implemented enterprise technology, developing operational solutions to manage environments effectively.
• Administration of Active Directory, firewalls, routers, switches, remote Desktop Services, VPNs, mail servers, VMware vCenter, security information and event management (SIEM), patch management, Kaspersky Security Center, Windows

IT Infrastructure Management
• Implemented and administered Active Directory 2008 with Windows clients.
• Ensured daily data backups on-premises and at offsite locations.
• Maintained up-to-date inventories of hardware and software as defined by ISO 9001 processes.
• Performed bi-annual maintenance and service of all workstations and servers as defined by ISO 9001 processes.
• Implemented and administered Office SharePoint 2007 Server, including integration with Project Server 2007.
• Implemented, administered, and managed Subversion servers and repositories as needed.
• Administered and managed internet gateways, corporate LAN, and organization portal.
• Installed, configured, maintained, and troubleshot all data communication equipment/infrastructure, hardware
(printers, scanners, UPS, generators), and softwares (mail server, VPN, database servers). Security and Governance
• Ensured that network and physical security measures, along with group policies, complied with ISO 27001 standards.
• Conducted risk assessments for assets owned by the Infrastructure Department.
• Performed risk inspections for organizational assets.
• Conducted vulnerability assessments and security testing for the offshore office.
• Implemented and administered the organizational anti-virus server, ensuring daily updates of virus definitions across the network.