Riyaz Feroze Email & Phone Number

Riyadh, Saudi Arabia

Leading three pillars :1. Cyber-Security2. Business Continuity operations3. Food crisis resilience for Kingdom

Riyadh

Security authority and provide cyber, IT governance leadership for head office and customer accounts in aerospace and defense accounts. Facilitate KSA and UK monthly security reviews, elevate cyber to business risks. Design, steer and accountable to deliver cyber-security programme.Planning and Budgeting for security initiativesContinuous enhancement of ISO 27001:2013Develop external supplier security requirements to comply with security policyDriving Saudi NCA ECC… Show more Security authority and provide cyber, IT governance leadership for head office and customer accounts in aerospace and defense accounts. Facilitate KSA and UK monthly security reviews, elevate cyber to business risks. Design, steer and accountable to deliver cyber-security programme.Planning and Budgeting for security initiativesContinuous enhancement of ISO 27001:2013Develop external supplier security requirements to comply with security policyDriving Saudi NCA ECC requirements into company security strategy including cloud, privacy & business continuitySteered the implementation of: - Network and Host Data Loss Prevention - Privileged Access Management - PhishMe simulation & incident responseDrive security strategy to meet global IT security standard mandated requirements.Assist program office in project management in implementing security projects Show less

Riyadh - Saudi Arabia

- Lead the Security and Compliance function at customer network & GRC team at ISE - HQ- Manage UK contractors and KSA resources to ensure security strategy is cascaded and implemented by service organization. - Ensure security requirements are identified and implemented in all service delivery and new projects.At ISE - Head Office- Responsible for ISO 27001:2005 ISMS implementation and continuous improvement including surveillance audits from external auditors-… Show more - Lead the Security and Compliance function at customer network & GRC team at ISE - HQ- Manage UK contractors and KSA resources to ensure security strategy is cascaded and implemented by service organization. - Ensure security requirements are identified and implemented in all service delivery and new projects.At ISE - Head Office- Responsible for ISO 27001:2005 ISMS implementation and continuous improvement including surveillance audits from external auditors- Managed the transition from 2005 ISMS to 2013 and helped ISE to achieve the renewed certification with no major non-conformities been reported- Facilitate Security management committee and ensure security risks are adequately addressed.- Manage the supply chain cyber security risk assessment for all third parties of ISE. Show less

Riyadh

Chair the security compliance forum and manage the security compliance audits for BAE Systems Saudi Arabia and ensure the security and compliance contractual obligations are fulfilled by ISE which is the service provider for the KSA home market. - KSA Security Cleared- Established the Security Compliance framework- Ensured the customer's network is in compliance to ITIL and Information Security processes- Interfaced UK and regional external security audits.- Provide… Show more Chair the security compliance forum and manage the security compliance audits for BAE Systems Saudi Arabia and ensure the security and compliance contractual obligations are fulfilled by ISE which is the service provider for the KSA home market. - KSA Security Cleared- Established the Security Compliance framework- Ensured the customer's network is in compliance to ITIL and Information Security processes- Interfaced UK and regional external security audits.- Provide security awareness and acceptable use policy training to staff. Show less

Led the corporate business continuity planning and facilitated business units to develop their plansDirected the Control and Risk Self-Assessment (CRSA) activities in adherence with SAMA regulationSteered security awareness and ethics among Tawuniya staff through awareness sessionsKey AchievementsDesigned & delivered security awareness roll-out for 4000+ staffEstablished 30+ CRSA risk profiles for critical applications across the business units of… Show more Led the corporate business continuity planning and facilitated business units to develop their plansDirected the Control and Risk Self-Assessment (CRSA) activities in adherence with SAMA regulationSteered security awareness and ethics among Tawuniya staff through awareness sessionsKey AchievementsDesigned & delivered security awareness roll-out for 4000+ staffEstablished 30+ CRSA risk profiles for critical applications across the business units of organizationTransformed 12 business units to develop & test their department’s business continuity plan Show less

Saudi Arabia

Steered and delivered security projects for government and academic institutions of the regionPeople leadership and managed team of 2 security consultants to implement projects Key AchievementsEstablished and delivered 20+ lectures for >500+ students on Security, CoBIT, risk management topicsDirected the implementation of ISO 27001:2005 ISMS for the data center of the universityArchitected a customized policy framework, gap assessment tool to be used in security… Show more Steered and delivered security projects for government and academic institutions of the regionPeople leadership and managed team of 2 security consultants to implement projects Key AchievementsEstablished and delivered 20+ lectures for >500+ students on Security, CoBIT, risk management topicsDirected the implementation of ISO 27001:2005 ISMS for the data center of the universityArchitected a customized policy framework, gap assessment tool to be used in security projects Show less

India

Managed the security operations of the off short location. Provided ISMS consultancy solutions for security projects in Riyadh, Qatar, and in USA.Led a team of 5 to manage security operations and projects in Qatar (Oil & Gas), KSA (brokerage) & India (Healthcare, IT service provider)Present monthly status update to corporate office in USA on regional security activities Accountable for ISMS, security governance & strategy, risk management, security policy development, vulnerability… Show more Managed the security operations of the off short location. Provided ISMS consultancy solutions for security projects in Riyadh, Qatar, and in USA.Led a team of 5 to manage security operations and projects in Qatar (Oil & Gas), KSA (brokerage) & India (Healthcare, IT service provider)Present monthly status update to corporate office in USA on regional security activities Accountable for ISMS, security governance & strategy, risk management, security policy development, vulnerability assessment, incident response, compliance, security awareness & security metrics Established proposal requirements, negotiations, finalizing contracts & managing client relationshipKey AchievementsEstablished information security strategy and security policy framework for the offshore location Generated a profit of ~5M INR to the company by successfully delivering security consultancy projects Steered the security compliance mandates of corporate office to achieve >95% complianceAchieved SPOT awards for 2 consecutive years for the contribution and growth to the business Show less

Bengaluru Area, India

• Was responsible in planning & implementing Intrushield IPS device at a customer and testing it for its adequacy. • Performed risk assessment with the coordination of IT department. Used OCTAVE risk evaluation methodology. Coordinated workshops with Information security manager in preparing threat profile.

Chennai Area, India

• Tested CISCO IOS firewalls, IPS/IDS, SIP, H.323, protocols and involved in planning, setting up the CISCO ASA 5520 device in HCL premises as per the design of the IT security architecture.

• Remote Management and technical support for Sonic wall products for the customers at North America and Canada. As a level two engineer handled the escalation cases, reproducing customer issues at local test lab and providing solutions on security concerns.

• Technical Support through voice and mail to Global clients on their products like wireless access points, Bridges, Routers, Wireless NIC & Ethernet cards. Responsible for leading the email team

Master Of Business Administration - Mba, Cyber Security

Activities and Societies: Digital Security, Cyber Risk Management

Bachelor Of Engineering, Electronics

Activities and Societies: Body building, Weight lifting (won medals at Inter Engineering Sports TIES)