Amer Khalaf

- Lead GRC initiatives and upcoming information security projects, ensuring alignment with organizational goals. - Oversaw implementation and continuous monitoring of NCA cybersecurity controls across all PMO programs. - Managed and coordinated NCA audit readiness and compliance activities. - Acted as Cyber Risk Manager across enterprise projects, driving risk identification, mitigation, and reporting. - Served as Risk Champion, collaborating with Enterprise Risk Management (ERM) to align project and operational risk strategies.

- Spearheaded cybersecurity consulting for a confidential client, designing an Information Security Framework aligned with NCA, ISO 27001, and industry best practices. - Defined security vision, mission, and strategic communication plans to enhance organizational alignment. - Developed an Information Security Maturity Model to assess and improve security posture. - Restructured the Information Security Department, including org design, RACI, and role definitions. - Redesigned Security Strategy, Operating Model, and Governance Framework. - Established Project Management, Vendor Risk Management (VRM), and Security Architecture frameworks. - Led security controls implementation to boost maturity across multi-site integrations. - Project Lifecycle Delivery: o Conducted AS-IS Assessment: o Asset Inventory, Gap Analysis, VAPT, Risk Register. o Defined TO-BE Security Architecture & Solutions. o Created implementation roadmap with prioritized actions, execution support, and reporting. o Delivered cybersecurity awareness training to enforce secure behavior and compliance.

- Oversaw cybersecurity policy implementation, ensuring compliance with regulatory standards (e.g., NIST, ISO 27001). - Led cybersecurity & IT projects, managing scope, budget, timelines, KPIs, and stakeholder alignment. - Directed integration activities, risk mitigation, and adherence to cybersecurity frameworks. - Delivered project status reports, conducted stakeholder meetings, and resolved risks/issues. - Ensured project handover, documentation, and signoffs. - Deployed advanced security solutions: o Cisco (AMP, Threat Grid, Firepower NGFW, ESA, ISE, Stealth watch, Arbor DDoS). o F5, Symantec (Endpoint Protection, Encryption). o RSA (IGL, SecurID 2FA). o IBM QRadar SIEM for threat detection & log management.

- Defined project scope, mapped IT infrastructure, and conducted business impact analysis (BIA). - Performed risk assessments, risk treatment, and compliance audits. - Developed and enhanced information security policies, standards, and guidelines. - Prepared documentation for external auditors and ensured QA for deliverables. - Upgraded IT systems, including servers, applications, and cloud hosting (VM migration). - Trained staff on IT tools, applications, and ERP systems. - Led ERP migration to Microsoft Dynamics (Axapta). - Managed RFID-based infant protection system for King Fahad Medical City. - Developed procurement system aligned with FAR (Federal Acquisition Regulation). - Oversaw company websites, CMS, and social media marketing.

- Administer petty cash, and salary payment to Waseela Co. - Approve the transfer to company vendors and contractors - Joined company initial business meetings to boom in operation. - Helped Waseela to choose their first business office and buy the required materials. - Manage the process of applying for visa to the company employees, and follow up the required procedure until Waseela receive them.

- Led business development and sales strategy for Wireless, IoT, and software solutions, driving market expansion and strategic partnerships. - Managed key accounts and guided the sales team to deliver custom and off-the-shelf web and Windows applications. - Oversaw customer satisfaction and post-sales support for IoT, Wi-Fi, WiMAX, and microwave technologies. - Developed eCommerce platforms, managed web hosting services, and launched digital marketing campaigns.

- Successfully managed large-scale digitization project, delivering ahead of schedule while exceeding quality standards - Led enterprise-wide implementation of Microsoft Dynamics (Great Plains) across all departments - Provided strategic information security consultancy, ensuring compliance with industry standards - Collaborated on network infrastructure deployment and security enhancements for ACT.

- Led technical sales team for telecom solutions (DSL, Leased Lines, VPN circuits), driving revenue growth - Conducted market analysis to identify and capitalize on emerging business opportunities - Monitored ISP performance metrics and network security, ensuring 100% customer satisfaction - Launched hosting services and cloud-based solutions to expand service portfolio