- Develop, Maintain, and implement information security policies, procedures, and processes.- Lead systems VA, PT, and code review engagements performed by contractors, and regulators.- Responsible for the continuous vulnerability management efforts (internal and external), and communication with all stakeholders.- Focal point for regulatory communication related to advisories and threat feeds (ADDA and AECERT).- Focal point for internal and external security audits.- Handle regulatory (ADDA) incident escalation and response within the defined SLA.- Manage all internal incident response efforts.- Define security requirements and baselines for systems and secure software development.- Implementation of all technical controls of ISO 27001 and NESA (UAE IAS).- Manage security projects in all phases from initiation to sign-off, PoCs, preparing RFPs scopes, evaluation, and implementation.- Contribute to security awareness in the organization by providing content, and coordinating the awareness workshops.- Monitor, maintain, and update IT security KPIs.- Information Security budget planning.- Projects: Microsoft 365 Security | NESA (UAE Information Assurance Standard) and ISO 27001 Compliance | Implementation of SIEM | Implementation of Vulnerability Management (Tenable) | NGFW Firewall Migration | Web Application Firewall (WAF) Implementation | Network Access Control Implementation | Campus Network Migration and DR network implementation.

- Manage security systems, networks, IP telephony, and datacenters.- Conduct regular security reviews and assessment for the network and systems, and plan remediation for detected vulnerabilities.- Research new technologies and initiatives, conduct, supervise PoCs, and contribute to the IT strategy and budget.- Compose RFPs for the new projects.- Manage projects, and supervise the implementation.- Member of Disaster Recovery Committee, and Procurement Committee.

- Ensure the availability of Core Network Services, serving millions of customers (ADSL, E-Life, Mobile…), while conforming to best practices in the industry.- Participate in ongoing projects in designs, planning, implementations, vendors meetings, PoCs, ATPs….etc- Ensure that all service level agreements (SLAs) are delivered according to specifications.- Analyze systems operation and identifying potential issues, and introduce performance tuning where possible.- Perform security audits and risk management for the managed systems.- Provide support to other support levels and sections.- Identify tasks which should be automated, and lead the automation efforts.- Document work procedures and systems related configuration.- Projects Contribution: Service Activation Project (Service Provisioning Automation) | IPv6 Transition Project | Distributed DNS | Distributed DNS Firewall using Perl and IPTables | Service Monitoring and Availability Enhancement | SIEM Integration.

Projects:- PDN (Syrian Public Data Network) network upgrade: Upgrade the ISP network | Migrate the billing and radius cluster | Prepare Hand over procedure of the PDN project as subcontractor to the STE (Syria Telecommunication Establishment) | - E-lcom ISPs capacity optimization: Redesign ISP infrastructure an Optimize configuration to handle more users’ traffic within the current hardware | Deployment of traffic monitoring and service monitoring tools | Proxy optimization to handle high request rates.

- Development and Operation of the infrastructure design, strategy, security of the Syrian Public Data Network, Internet Backbone, and Trassul ISP.- Contribute in Project design, implementation, and handover- Conduct training for the team members and customer- Prepare project progress and operation reports.- Follow-up with daily operation.