Abdelrahman K.

Currently steering cybersecurity programs for leading financial institutions across the Arab Gulf and Egypt, I focus on fortifying both digital and conventional banking systems. I am deeply involved in formulating strategic roadmaps to mature Information Security and IT processes and champion the adoption of robust cybersecurity frameworks in collaboration with key stakeholders. Key Achievements: ● Pioneered the Architecture and Business Information Security Office for Vision Bank KSA, laying the groundwork for secure digital banking operations. ● Elevated KSA Startup Digital Bank to a SAMA maturity level 4, achieving managed and measurable standards across Cybersecurity, Counter-Fraud, and IT Governance. ● Delivered essential consultancy on PDPL and NCA-DCC for a leading KSA fintech, aligning with stringent privacy and cybersecurity regulations. ● Conducted gap analysis for Ahli United Bank- Egypt (AUB-E) against the Central Bank of Egypt's Cybersecurity Framework. ● Developed strategic Hybrid Cloud Security roadmap aimed at facilitating secure cloud adoption and operations.

At BdC, I spearheaded the IT Security division, leading initiatives across network, applications, identity, and engineering. My role encompassed conducting comprehensive risk analyses, overseeing audits, and validating IT infrastructure to ensure a robust defense against cyber threats and compliance with CBE regulations. Key Achievements: ● Directed a portfolio of cybersecurity modernization projects, achieving an average of 25% in cost savings. ● Revolutionized Internet and Mobile Banking security, substantially increasing user accounts and transactions during the COVID-19 pandemic. ● Fast-tracked the launch of BdC's 24x7 SOC, significantly enhancing security monitoring and response capabilities amid the pandemic. ● Developed private cloud technology deployment plan, resulting in accelerating product and service delivery by 300% to 500%, and improving service provisioning time by 60% to 80%. ● Developed and implemented policies, guidelines, and roadmap for full adoption of IAM and PAM technologies, streamlining access management across bank systems; conducted POCs for various solutions (e.g., IAM, PAM, CIAM, OTP, SSO…). ● Enhanced data-driven decision-making by translating security metrics for board committees, linking IT risks to business impact, and boosting executive engagement with security projects. ● Boosted resolution of audit findings from 30% to 80% by fostering strong regulatory and auditor relationships, enabling smoother communication and agreement on recommendations.

Led the design and implementation of IT security solutions, ensuring alignment with business goals. My responsibilities included advising on security controls, disaster recovery planning, and IT compliance to maintain operational continuity and information integrity. Key Achievements: ● Successfully implemented a Disaster Recovery Site, bolstering business continuity for critical applications. ● Enhanced network security posture through the deployment of Next-Generation Firewall and email gateway solutions. ● Conducted new ERP hardware sizing, optimizing for performance, security, and business continuity.

Oversaw the design and execution of network and security infrastructures for P&G facilities. My focus was on assessing risks, applying mitigating controls, and ensuring compliance with IT and security standards. Key Achievements: ● Designed and executed a secure network infrastructure for a new P&G plant, ensuring high connectivity availability and support for over 800 users in a 2000+ node network.

In this pivotal role, I led efforts to strengthen online security defenses, achieve PCI-DSS compliance, and deploy SIEM for improved event correlation and incident response capabilities. Key Achievements: ● Installed critical security systems (reverse proxy, IPS, Data Leakage Prevention), enhancing online banking security. ● Led the initial PCI-DSS compliance assessment, developing and implementing comprehensive remediation plans. ● Developed and implemented network and security infrastructure for Disaster Recovery (DR) and Business Continuity Planning (BCP) at NBAD, resulting in successful DR test outcomes (Failover & Failback).