Mustafa Saeed Abu Hammam

As part of my role, I have been the focal point for all activities related to development and compliance of IDS policies, processes, procedures and guidelines. I am also the focal point for all IDS audits. Working with different team members across IDS either corporate or at the client to sense the needs for services and technologies. Having insights in the IDS Opex and Capex and provide expert advice on solutions and technologies based on my experience and qualification. Propose ITSM model to manage IDS services for better operation and alignment with clients needs. Follow up and ensure compliance with applicable compliance requirements (regulatory, industry, policies, processes & procedures). I am also an active member for OQ Omani PDPL compliance task force.

Led PDPL governance, policy development, and operational frameworks; authored PDPL compliance business models; delivered role based PDPL awareness programs; developed PDPL compliant vendor DPAs with GDPR alignment; coordinated regulatory briefings following MTCIT engagements; and supported third party and cloud compliance under PDPL and GDPR obligations.

Led GDPR compliance program for OQ-Chemicals (Germany), coordinating with headquarters in Muscat to ensure alignment with EU privacy requirements and managing Data Processing Agreements. Served as primary liaison for external audits and authorities, including Ministry of Transport, Communication, and Information Technology, and Oman Investment Authority, covering compliance, cybersecurity, and privacy assessments. Conducted privacy risk assessments and impact analyses to identify and mitigate potential personal data risks. Developed and implemented privacy policies, procedures, and standards across multiple business units. Collaborated with legal, compliance, and business teams to embed privacy principles in operational processes. Applied knowledge of CCPA and HIPAA through CISA and CDPSE certification programs, supporting privacy compliance initiatives. Led digital solutions and cybersecurity assurance programs to strengthen overall data protection posture.

Manage the delivery of the SAP technical part related to new integrated OQ business model (Nakhla project) .

As a team leader I have managed 25+ professional resources of technical and functional capabilities to deliver business applications (Mainly SAP , MES and Corporate Applications) services. Strategy & Planning was one of my core duties to ensure the application portfolio and related infrastructure is all in syn and provide the expected value to business. Coordinate with business owners for strategic initiatives and how to realize them in SAP e.g. Zero Based Budget, Preventive Manit, VIMS, … .. Strategic partnering to support business transformation initiatives (EPC for LPIC, SR2, Jifnin Terminal, …). Lead projects for enhancing the value generated by IT (Tawreed, SAP Mobility, SAP GRC, ..)

Prepare and consolidate IDS yearly planning, budget preparation , defense , approval and track spending. Follow up IT budget cashflow and ensure budget is under control . Project manager for IT strategy development and 3 years roadmap . Monitor IT project portfolio status and follow up with stakeholders (including business owners). Ensure SLAs are signed with business, tracked for operation and performance reporting (KPIs & SLA performance). Lead the effort for developing IT policy manual and detailed processes project.

Founding the SAP department. Develop business plan for SAP partnership including 3-5 years cash flow forecasts. Build and manage capabilities to run SAP department (presales, marketing and technical and functional teams) .

Participated effectively in the team (IT section heads, IT director and EY consultants) efforts to develop IT policies and procedures manual at CSEPF. The project also included defining job description for each of the positions at the IT department.