Mohammed Sameer Email & Phone Number

As a dedicated Cybersecurity GRC professional, I am passionate about helping organizations navigate the complex landscape of security governance, risk management, and compliance. With a strong foundation in cybersecurity frameworks, regulations, and best practices, I work to ensure that security is integrated into every facet of business operations, enabling organizations to mitigate risks, meet regulatory requirements, and maintain resilience against evolving threats.My expertise spans:Governance: Establishing and aligning security policies, processes, and frameworks with business goals, while ensuring executive leadership has visibility into the security posture.Risk Management: Identifying, assessing, and prioritizing cybersecurity risks, while developing and implementing risk treatment plans to safeguard critical assets and data.Compliance: Ensuring adherence to industry standards, regulations, and frameworks such as ISO 27001, NIST, GDPR, and local regulations, while conducting internal audits and gap assessments to maintain compliance.Control Implementation: Collaborating with cross-functional teams to design and implement security controls that are both effective and efficient, while supporting the overall risk and compliance strategy.Incident Response & Continuous Improvement: Actively participating in incident response planning and execution, ensuring lessons learned are incorporated into policies and processes for continual improvement.

• 

  Cybersecurity Consultant

  Infopercept Consulting

  Sep 2021 - Sep 2024 - India

  • Conducted comprehensive cybersecurity assessments, maturity assessments, and design reviews to identify vulnerabilities and gaps.• Implemented robust cybersecurity frameworks, such as ISO 27001, NIST, and Saudi standards like SAMA CSF, NCA ECC, DCC, OSMACC, CSCC, Tadawul, CMA, Aramco CCC, and PDPL.• Provided expert network solutions, cybersecurity consultation, and IT infrastructure services to enhance clients' security posture.• Collaborated effectively with clients to understand their unique requirements and deliver tailored solutions.• Utilized strong communication, team building, and project management skills to drive successful outcomes.• Successfully guided clients in achieving a higher level of cybersecurity maturity by implementing best practices and addressing identified vulnerabilities.• Assisted clients in achieving compliance with relevant industry standards and regulations, reducing their exposure to risks and fines.• Helped clients enhance their resilience to cyber threats by implementing effective security measures and incident response plans.• Manage the ISMS including maintenance of the current ISO 27001 certification scope as well as strategic expansion across the customer's organization.• Support the management of information security governance for the organization, ensuring adherence to group policies and standards.• Assist with updating the Third Party Risk Management framework including policy, procedures, due diligence questionnaires and the monitoring of third parties adherence to information security and data privacy obligations.• Assist with the client management aspects of the Information Security team, including client and potential client questionnaires; help design a more effective process including a self-service process and a library of standard responses.• Provide insights on overall GRC with Weekly updates which covers overall InfoSec and compliance status.