Lama A., CISSP, PMP, ACP

• Implements security controls, risk assessment frameworks, and programs that align with regulatory requirements and business objectives, including NIST SP 800-171, NIST Cybersecurity Framework, and CMMC. • Reviews control effectiveness evidence through collecting and reviewing relevant documentation for compliance purposes. • Collaborates with internal and external auditors on security assessments and audits and ensures implementation of action plans accordingly. • Led audits and assessments for third-party SaaS applications that range from IAM, Disaster Recovery, Incident Response, and Vulnerability Management.

• Implemented security controls, risk assessment frameworks, and programs that aligned with regulatory requirements and the university’s business objectives. • Monitored and maintained security controls to ensure compliance with applicable regulatory requirements, such as GLBA, GDPR, DMCA, NIST, and internal and external audit requirements. • Aligned incident response plans with NIST 800-61, i.e., Computer Security Incident Handling. • Benchmarked GRC tools for automation and optimization.

• Built robust and effective relations with staff to act as a conduit between the student body and faculty when problems need resolving. • Diligently completed administrative tasks where required. • Undertook complex analysis to benchmark and enhance various programs, including peer-tutoring programs.

• Led an e-commerce program targeting staff and external customers from planning through the delivery of 35+ projects across 8 internal and external teams. • Oversaw website security risks by supervising penetration tests, and implementing protective responses through Radware, such as a web application firewall, distributed denial-of-service protection, a bot manager, and a network firewall. • Supervised a security risk assessment in a DevOps project in order to generate a vulnerability assessment report by identifying gaps and making security recommendations. • Managed an ERP system for HR, Finance, and Procurement departments, running this multi-threaded project from conception, design, development, and testing through delivery. • Led a corporate-wide effort for the enablement of an Employee Self-Services Portal. • Managed payment systems projects to enhance the customer experience and security in coordination with SADAD, MasterCard & VISA, and different payment service providers’ flyadeal uses to support the company’s multiple Customer payment channels. • Documented the “As-Is” business processes; architecture diagrams; security measures; and gap points around customer payment systems and passenger reservation systems, and implementing “to-be” solutions. • Facilitated system audits and advised the CEO on subsequent improvement recommendations.

MINISTRY OF DEFENSE: • Managed a major transformation program to ensure a proper transition to the targeted model. • Prepared and delivered program status reports to the CEO and Senior Management Team. NATIONAL CENTER FOR PRIVATIZATION (NCP): • Managed programs under the Privatization Vision Realization Program (VRP) of Saudi Vision 2030 in coordination with the Ministry of Health for 3 major programs with over 22 projects. • Prepared program status reports to the NCP, VRP, and National Centre of Performance Management. MINISTRY OF ECONOMY AND PLANNING: • Identified digital requirements within a nationwide program with recommended infrastructure solutions. • Prepared the program initiation document as part of the program management plan. Issued and managed contractual procurement documents as part of financial management.

• Worked as a consultant and project manager responsible for nationwide governmental programs and related activities starting from initiation, planning, execution, monitoring and reporting to closing. NATIONAL LABOR GATEWAY (NLG): • Involved in the conceptualization, analysis, design, and delivery of programs for National Labor Gateway. • Led the development and implementation of an interactive voice response system throughout the different deployment environments while managing 5 teams of over 70 individuals. • Devised and executed handover plans to ensure seamless business operations. • In charge of contract administration through reviewing and issuing contractual procurement documents as part of financial management for several NLG programs. • Provided leadership and direction for enhancing procurement business processes, and produced reports to summarize organizational findings for the Executive Leadership Team. HUMAN RESOURCES DEVELOPMENT FUND: • Led a website enhancement project from conceptualization through implementation. • Managed the planning, analysis, and design of a 12-project program in customer service excellence. • Developed a cross-entity PMO Handbook through business process re-engineering from an as-is state to a to-be state.

•Created high-impact presentations tailored to academic leaders. •Researched and analyzed articles for candidate course case studies using a specific educational framework. •Redesigned surveys using MS Word, and entered data through MS Excel.

• Assisted teachers with instructional activities and classroom management

•Performed network related tasks and software support

•Monitored Akrebia system and updated information •Performed hardware maintenance on CPUs