Principal Consultant Grc
CurrentITSM Continual Improvement Program for Bahri, Riyadh, Saudi ArabiaConducted a comprehensive maturity assessment in alignment with ISO 20000 standards and the ITIL framework.Leading the execution of 18 projects within the continual improvement program, covering Service Portfolio, Budgeting & Accounting, Asset and Configuration Management, and Demand Management.Performing and overseeing risk management per ISO 31000 guidelines.Ensuring ongoing compliance and maintenance of Bahri’s ISO 20000 certification.Integrated Risk Management for Bidaya, Riyadh, Saudi ArabiaConducted a GAP Assessment of risk management documentation and practices across 17 departments.Recommended and implemented targeted enhancements in line with ISO 31000 guidelines, SAMA and NCA.Planned and led organization-wide awareness and training sessions to strengthen a risk-based culture.Conducted thorough technical and financial risk assessments.ISO 27001 and 20000 GAP Analysis for Salam Takaful, Karachi, PakistanCompleted a comprehensive GAP assessment against ISO 27001 and ISO 20000 standards for Stage I Audit readiness.Developed 50 new policy, process, and procedure documents compliant with ISO 27001 and ISO 20000.Updated and aligned 18 existing documents to meet ISO 27001 and ISO 20000 standards.Successfully achieved the readiness for Stage I Audit for ISO 27001 and ISO 20000 certifications.