Duha Alkarout

Senior IT Governance Manager | NIST & COBIT

Salary / Daily rate

Jordanów, Poland

Freelance, open to permanent contract

Skills

Unit4 ERP

Languages

English

About me

Intro

IT Governance expert with 15+ years implementing NIST, COBIT, and ISO27001 frameworks across banking and international organizations. Currently serving as National NIST Certification Officer at UN Migration, with proven success upgrading COBIT 5 to 2019 and achieving ISO27001 compliance. Ready to strengthen your cybersecurity posture and governance frameworks.

Links

Work experience

National NIST Certification Officer

IOM - UN Migration

Mar 2022 - Mar 2025

3 years 1 month

Amman, Jordan

• Assessment and Implementation of NIST 800-53 rev5: Conducted comprehensive assessments and successfully implemented the NIST 800-53 rev5 framework, ensuring compliance with stringent security standards. • Multi-Team Engagement Management: Led and coordinated multi-team engagements, effectively assigning tasks and ensuring seamless collaboration across various teams. • NIST Requirements Training: Provided in-depth orientation and training sessions on NIST requirements, enhancing the knowledge and compliance of team members. • External Assessor Liaison: Acted as the primary point of contact for external assessors, facilitating smooth communication and coordination during assessments. • NIST Control Implementation Reporting: Regularly reported on the status of NIST control implementation, ensuring transparency and accountability in the process.

Bank-al-Etihad

Mar 2013 - Dec 2021

8 years 10 months

Jordanów, Poland

Senior Manager, IT Governance

Apr 2019 - Dec 2021

2 years 9 months

Jordanów, Poland

Handled and managed projects (end to end) related to IT Governance including project and technical management such as implementation of Governance Framework, COBIT 5 and COBIT 2019, ISO27001, NIST Cyber Security Framework, and Data Loss Prevention. Defined, documented, and published all IT policies, procedures, and standards. Managed vendors' relationship and member of tech procurements approval committee. Maintained service level agreements and operational level agreements for tech departments. • Engaged with business departments to understand their requirements to implement the right solution for them. • Served as secretary of IT Governance committee/ board committee and worked closely with external auditors. • Managed Operational Security team, who is responsible for assigning the right privileges for different roles and users. • Worked closely with information security and risk team to set current risks, apply needed controls, and manage current risks. • Evaluated Control Risk Self-Assessment (CRSA) for tech department. 𝑲𝒆𝒚 𝑨𝒄𝒉𝒊𝒆𝒗𝒆𝒎𝒆𝒏𝒕𝒔: • Upgrading COBIT 5 frameworks to COBIT 2019 Framework. • Implementing Cyber Security Framework as per NIST Framework. • Initiate Implementation of CASB project. • Initiate implementation of the Identity Management Project.

IT Governance Manager

Apr 2018 - May 2019

1 year 2 months

Represented the Division on IT GRC matters, internally and externally. Participated in Information Security Policy, DRP, BCP modifications and updates. Conducted and reported results for Staff Satisfaction survey on behalf of Technology. Defined, recommended, and drove approval of Technology policies, standards, and procedures. • Acted as the main contact point for coordination and communication for an external audit conducted on Technology Division. • Coordinated across the Audit, Risk, Business Process, and IT Leadership Teams to ensure that IT governance, risk, and compliance processes are aligned and adhere to Bank al Etihad objectives. • Responsible for ensuring optimization, streamlining, maintenance & updating Technology processes or documentation related to the Technology, and inform the owner of any process document about required changes or improvements 𝑲𝒆𝒚 𝑨𝒄𝒉𝒊𝒆𝒗𝒆𝒎𝒆𝒏𝒕𝒔: • Achieved Maturity Level 3 for COBIT 5 framework. • Implemented Data Loss Prevention project.

Senior IT Governance Analyst

Mar 2013 - May 2018

5 years 3 months

Amman, Jordan

Served as a key player in achieving ISO27001 and secretary of IT Governance Committee. Responsible for contract management, participating in developing DRP, and updating Information Security Policy. Developed Project and IT Budget at the organization level and updated IT Assets (licenses, servers, storage, network, software etc.) • Performed audits of the information technology environments and applications to ensure compliance with policies and procedures. • Managed and controlled Internal and External audit notes by properly communicating them with the related team, getting updated feedback, and reporting a status regularly. 𝑲𝒆𝒚 𝑨𝒄𝒉𝒊𝒆𝒗𝒆𝒎𝒆𝒏𝒕𝒔: • Proactively activated IT Governance role in IT department. • Played key role in achieving ISO 27001 in Bank al Etihad; created and updated needed policies and procedures, conducted gap assessment, prepared corrective actions, risk assessment, etc. • Implemented COBIT 5 framework as per CBJ regulations and ISACA best practices.

Quality Assurance Lead / Project Manager

ESKADENIA Software

May 2011 - Mar 2013

1 year 11 months

ESKADENIA

Responsible for creating tasks and checklists for software deployment. Conducted audit at projects and the organizational levels as per CMMI standard. Implemented ongoing quality improvement processes working with interdepartmental teams. Developed and managed quality assurance metrics for performance improvement of all teams. • Implementing TFS 2010 helped improve the IT team's tasks, automate status reporting, and reduce estimation error. • Maintained product consistency throughout the product cycle, including design, define & build phases through quality testing. • Communicated, documented, planned, resolved conflict, and managed all the project's participant activities. • Worked with project managers to develop project schedules and resource allocation models for QA-related projects and other activities such as software deployment, customer integration, and professional services validation. 𝑷𝒓𝒐𝒋𝒆𝒄𝒕𝒔: • Egyptian Takaful Life • Qatrana Cement • Watania – Abu Dhabi • TFS 2010 Implementation 𝑲𝒆𝒚 𝑨𝒄𝒉𝒊𝒆𝒗𝒆𝒎𝒆𝒏𝒕𝒔: • After achieving CMMI, it was essential to keep continuous improvement and maintain the certificate; this was what I did for ESKADENIA after achieving CMMI. • Implemented TFS 2010 successfully, and as per CMMI methodology, TFS was key in maintaining all project-related tasks, documents, and reports.

Quality Control Officer

Optimiza

Sep 2006 - May 2011

4 years 9 months

Optimiza

Marketed and made orientation and presentations about the project. Followed up and was involved with projects audits, wrote and modified templates and documents. Reported and tracked bugs and ensured the process is being followed in different phases of a project. Planned and facilitated project review meetings to expedite requirements and resolution of project issues. • Participated in ensuring the successful delivery of products according to approved Quality Assurance standards. • Conducted regular meetings, facilitated communications, ensured coordination and cooperation among team members. • Guided the team on resource requirements, methodologies, deliverables, risks, and other issues throughout the project's life. • Responsible for Software Quality Control/Assurance, including preparing test plans, test cases/scenarios, setting test methodologies, traceability matrices, and leading testing efforts. 𝑲𝒆𝒚 𝑨𝒄𝒉𝒊𝒆𝒗𝒆𝒎𝒆𝒏𝒕𝒔: • Successfully achieved getting Optimiza CMMI level 3 certified; I was involved in the CMMI project where our target in this project is to be one of the first IT companies in Jordan to achieve the CMMI certificate to improve the quality of the processes and the work methods. • Performed heavy communications with OPIG team members and stakeholders. • Served as a member of OPAC, ATM member, and managed CMMI Processes.


Education

Hashemite University

Bachelor of Engineering

2002 - 2006

4 years 1 month

The best place to find your next move

© 2026. All Rights Reserved.