زيشان نواز

• Assist in drafting, maintaining, and enforcing policies, procedures, and controls in
accordance with local Laws, Regulations and Best Practices.
• Provide recommendations to enhance the security technology landscape.

• Perform gap and compliance assessment against Information security and
regulatory frameworks (SAMA CSF, NCA CSCC, NCA ECC, NCA DCC).
• Assessed the cybersecurity risk associated with third-party vendors and partners
and ensured appropriate security controls were in place to protect our data and
systems.
• Worked with Project Management Team and performed Information Security risk
assessments on multiple changes and project induction.
• Development and implementation of Information Security policy, procedures and
standards against best practices and compliance requirements.
• Planning, execution, and management of projects related to information security
management.
• Establish and enhance cyber security compliance Framework and provided inputs
to deploy in RSA Archer
• Security Awareness Training & Cyber Insurance and promote a culture of security
within the organization.
• Conduct internal information security reviews and support external regulatory
audits conducted by SAMA
• Led information security awareness initiatives during employee onboarding,
promoting adherence to security policies and best practices.
• Perform review of physical security as per Information Security Requirements.
• Established Information security Project requirements and documentation of RFPs.
• Support team members and resolve routine Information Security related queries to
ensure work continuity.

• Engineered, deployed, managed, and enhanced .NET-based applications using the
SAP SDK.
• Delivered technology solutions for small and medium-sized enterprises (SMEs)
across the consumer and commercial sectors.
• Conducted requirements analysis, application reviews, and software reliability
assessments.
• Designed and implemented an HRMS add-on solution using the SAP SDK