As an experienced professional with over 12 years of expertise in Governance, Risk Management, and Compliance (GRC), ISO, IT Risk Management, Assurance, Data Classification, and Cybersecurity domains, I have a proven track record of successfully executing multiple management system implementation projects, including ISMS, BCMS, ITSMS, HIPPA, and PCI DSS. I have extensive hands-on experience in managing the end-to-end certification life-cycle, and have worked with both global and local companies in various industries, including Banking and Finance, TELCO, Oil & Gas, Insurance, Healthcare, Retail, ICT, and Manufacturing.As a CISA and PMP certified Information Security Auditor, IT Audit, Cyber Security, IT Governance, ISO 27001, ISO 20000-1, NIST, PCI DSS, ITIL, GDPR, FISMA, ISO 27017, ISO 27018 and ISO 22301 & ISO 22316. Executed assessment on IT internal controls as part of the compliance and operational audits. I have executed assessments on IT internal controls as part of compliance and operational audits. I also have experience in incident/breach response based on ISO 27001:2013 and various other standards, including SAMA, NIAP, NIST 800-53, NIST-CSF, and GDPR, and in developing baseline documents as per industry standards, including ITIL, COBIT, PCIDSS, SOX, OCTAVE/31000, and COSO.Setting the conditions for IT/Cyber to enable the success of Business Objectives, driving productivity in environments with a high degree of volatility, uncertainty, complexity, ambiguity (VUCA). As a strategic & creative leader I drive the translate/identify/execute of IT & Cyber requirements in support of Operations objectives & Customer requirements, building rapport with Global teams & across Functional Areas in Cyber-driven, often-fluid, Enterprise IT environments; simplifying, saving, delivering impactful value-based Services-Products-Capabilities