Youssef Nader

-Led end-to-end IT audits to evaluate the security, compliance, and operational effectiveness of systems and processes, ensuring alignment with ISO 27001, GDPR, and internal policies. -Conducted risk assessments across diverse IT environments, including ERP platforms (SAP, SAGE), infrastructure components, and databases (Oracle, SQL Server), identifying vulnerabilities and recommending targeted mitigation strategies. -Assessed and enhanced IT controls (ITGCs & ITACs) to improve system availability, data integrity, and access governance. -Evaluated backup and recovery strategies, system monitoring configurations, and patch management processes to support business continuity and operational resilience. -Collaborated with technical teams, compliance officers, and department heads to align audit findings with business objectives and regulatory requirements. -Prepared detailed reports, control matrices, and risk analysis summaries to support remediation planning and executive-level decision-making.

-Actively contributed to threat monitoring and incident response as part of a Security Operations Center (SOC), analyzing EDR alerts, supporting investigations, and assisting in the containment of security incidents to improve organizational resilience. -Participated in the full lifecycle of a Data Loss Prevention (DLP) project — from solution analysis and provider evaluation to data classification, policy drafting, and testing — ensuring alignment with ISO 27001, GDPR, and internal governance requirements. -Supported the creation of DLP policies by helping classify sensitive data, document business needs, and apply ISO 27001 and GDPR principles. Worked closely with the team to translate these elements into clear, enforceable rules. -Assisted in the deployment of XDR and SIEM tools to improve monitoring and detection capabilities. ----Contributed to compliance efforts by helping align configurations with ISO 27001 controls and internal audit requirements.

-Worked with FortiGate firewall environments, including creating and tuning security rules to enhance network protection. -Analyzed network traffic and security logs using FortiAnalyzer to identify threats and support incident response. -Collaborated closely with the network security team on monitoring, alert management, and real-time threat detection to strengthen the organization’s cybersecurity posture.

-Worked alongside the chief IT manager to develop and implement a new firewall for data protection -Maintained and updated servers and networks for optimal performance and security -Conducted regular checks and troubleshooting on server and network hardware and software -Assisted in the creation of network diagrams and documentation for network architecture and topology -Configured and tested various network protocols, such as TCP/IP, DNS, DHCP, and VLANs -Collaborated with other members of the IT team to identify and resolve network issues