Mojeeb Khan Email & Phone Number

Riyadh, Sa

Saudi Arabia

Conduct regular risk assessments to identify vulnerabilities and threats, evaluate risk levels, and recommendmitigation strategies.• Conduct detailed risk analyses and assessments on IT systems, networks, and data to identify vulnerabilities,threats, and potential security issues.• Develop and recommend risk mitigation strategies and solutions to manage identified risks effectively. Workclosely with IT and security teams to implement these strategies.• Communicate risk assessment findings effectively to stakeholders, including technical and non-technicalaudiences• Conduct the industry security standards assessments such as ISO 27001, SAMA..• Monitor and report on compliance with regulatory requirements and internal policies.• Contribute to the enhancement of cyber security policies and procedures based on industry best practicesCERTIFICATIONS• Cisco Certified Specialist - Security Core- CSCO14175737• ISO 27001 lead auditor• Certified Information Systems Auditor (CISA)• Certified in Risk and Information Systems Control (CRISC)PROFESSIONAL EXPERIENCE:Cyber Security Specialist Jan 22 2023- presentRiyadh, Saudi ArabiaClassification: Public• Produce risk reports and documentation for both technical and non-technical stakeholders. Maintaincomprehensive records of risk assessments, mitigation strategies, and audit findings. Work closely with variousdepartments to communicate risk-related concepts and persuade on the necessary actions and precautions.• Prepare for and manage internal and external audits related to cybersecurity risks.• Collaborate with legal, IT, and business units to ensure cybersecurity risk is mitigated across all aspects of theorganization. Prepare and present reports on risk assessment findings, and recommendations for improvementto senior management.• Architecting & Designing Enterprise Security solutions based on requirements from the business making use ofexisting IT capabilities and services in the Organization

Saudi Arabia

Acted as a knowledge/Research Engineer in the software projects based on Risk Assessment, and ISO27001• Act as subject matter expert in the area of Security Risk assessments, BCP, Incident Management• Optimised network performance and reliability by overseeing the installation, configuration, andtroubleshooting of Juniper L2/L3 switches.• Conducted LAN, DMZ, and internet-facing security scans of mission-critical devices to identify potentialvulnerabilities and malicious programs.• Managed endpoint and network security for client infrastructure, ensuring comprehensive protection againstcyber threats.• Configured, monitored, and troubleshoot Cisco and Fortinet security appliances, including failover DMZ zoning,VLANs/routing/NAT configurations with firewalls.• Integrated SCCVM into Cisco ACI for all new 40G and 10G HP enclosures, enhancing security and scalability.• Managed Juniper firewall, including daily monitoring, log analysis, rule management, IOS upgrades, backup,remote VPN configuration, zone expansion, SNMP configuration, and firewall hardening.• Make sure Risk assessments are conducted periodically and risks are prioritize based on the impact• Evaluates vendor engagements to identify and manage vendor risk & reviews Inherent risk questionnaires andcalculates inherent risk