• Conducted comprehensive cybersecurity assessments, maturity assessments, and design reviews to identify vulnerabilities and gaps.• Implemented robust cybersecurity frameworks, such as ISO 27001, NIST, and Saudi standards like SAMA CSF, NCA ECC, DCC, OSMACC, CSCC, Tadawul, CMA, Aramco CCC, and PDPL.• Provided expert network solutions, cybersecurity consultation, and IT infrastructure services to enhance clients' security posture.• Collaborated effectively with clients to understand their unique requirements and deliver tailored solutions.• Utilized strong communication, team building, and project management skills to drive successful outcomes.• Successfully guided clients in achieving a higher level of cybersecurity maturity by implementing best practices and addressing identified vulnerabilities.• Assisted clients in achieving compliance with relevant industry standards and regulations, reducing their exposure to risks and fines.• Helped clients enhance their resilience to cyber threats by implementing effective security measures and incident response plans.• Manage the ISMS including maintenance of the current ISO 27001 certification scope as well as strategic expansion across the customer's organization.• Support the management of information security governance for the organization, ensuring adherence to group policies and standards.• Assist with updating the Third Party Risk Management framework including policy, procedures, due diligence questionnaires and the monitoring of third parties adherence to information security and data privacy obligations.• Assist with the client management aspects of the Information Security team, including client and potential client questionnaires; help design a more effective process including a self-service process and a library of standard responses.• Provide insights on overall GRC with Weekly updates which covers overall InfoSec and compliance status.