Yahya Oubrahim

• Designed and executed Control Level 2 review plans to enhance controls and risk mitigation, focusing on improving Level 1 controls (LOD1). • Managed a team of controllers, overseeing annual planning and execution of reviews to assess and improve control effectiveness. • Contributed to improving risk identification and response processes, enhancing organizational resilience. •Applied international standards (NIST, ISO 27001, COBIT) to ensure security and compliance alignment. • Conducted IT & cybersecurity risk awareness sessions to build risk culture among operational teams. • Collaborated with senior stakeholders and compliance officers to align risk posture with business strategy. • Developed structured procedures for issue resolution and performance monitoring, resulting in measurable operational improvements. • Collaborated with cross-functional teams to optimize compliance initiatives and align with regulatory requirements.

• Conducted audits across IT and operational domains, contributing to enhanced compliance and governance practices. • Evaluated IT infrastructure, governance, and access controls in alignment with national policies. • Led risk-based assessments focusing on cybersecurity threats, network security, and SOD gaps. • Designed training programs to build IT audit expertise, improving team capabilities and operational coverage. • Introduced monitoring systems to optimize project oversight and support decision-making. • Identified key areas for improvement in public administration processes and provided actionable recommendations. • Participated in international collaborations to develop guidelines and best practices in IT governance and risk management.

Provided consultancy services to optimize governance, risk, and compliance frameworks, ensuring alignment with industry standards and regulations.