Abdulaziz Alfelaiw

Risk Assessment and Mitigation: Lead comprehensive risk assessments to identify potential security threats and vulnerabilities, providing strategic recommendations to minimize risks from cyber-attacks and hacking groups. Security Operations and Compliance: Manage security operations, ensuring the effective design and execution of protective strategies for information systems and data, while adhering to Governance, Risk Management, and Compliance (GRC) standards. Leadership and Security Strategy: Direct the information security team, overseeing the implementation of security protocols, managing incident response, and driving the continuous enhancement of security measures to safeguard the organization's assets.

Strategic Leadership & Risk Management: Spearheaded the development and execution of a comprehensive information security program, collaborating with various business units to assess and mitigate IT risks, while ensuring the protection of organizational assets through the implementation of robust security policies, procedures, and frameworks. System Integrity & Infrastructure Protection: Oversaw the integrity of information systems and secured network infrastructures, identifying vulnerabilities and deploying measures for intrusion detection, data loss prevention, and disaster recovery. Team Leadership & Governance: Led the Information Security Department, providing ongoing training on security protocols and fostering continuous improvement. Conducted regular security assessments, compliance audits, and incident response management, while chairing the cybersecurity committee and actively participating in the Risk & Business Continuity Management (BCM) committee.

Cybersecurity Strategy & Implementation: Developed and enforced IT policies and procedures to safeguard organizational systems and networks, ensuring robust defenses against cyber threats. Operations & Offshore Support: Monitored IT infrastructure, managed security tools, and addressed incidents. Conducted regular offshore inspections to ensure VSAT connectivity and provided technical troubleshooting support. Team Leadership & Awareness: Led cybersecurity initiatives, mentored teams, and strengthened organizational security awareness to mitigate risks and enhance overall resilience.

Cybersecurity Strategy & Implementation: Developed and enforced IT strategies, policies, and procedures to protect organizational information systems and networks, ensuring robust defense against cyber threats. Security Operations & Compliance: Monitored IT infrastructure, managed security tools and technologies, ensured compliance with both internal and external policies, and effectively handled security incidents. Team Leadership & Awareness: Led, coached, and coordinated cybersecurity initiatives, while promoting security awareness across the organization to reduce risks and enhance overall cyber resilience.

IT Infrastructure Management: Managed and optimized IT systems, ensuring secure and efficient operation of computer networks, servers, and hardware. Developed strategies to improve ERP systems and departmental workflows, while overseeing firewalls (e.g., Cyberoam) and implementing cybersecurity protocols. Technical Support & Troubleshooting: Installed and configured hardware, software, and operating systems. Provided user support by setting up accounts, resolving password issues, and diagnosing hardware/software faults, including malware detection and removal using Kaspersky Endpoint Security. Process Improvement & Training: Enhanced IT procedures, introduced strategies to increase efficiency, and supported employee training on new hardware and software systems, driving overall organizational productivity.