ABDULLAH A.

About

Information Security and GRC Leader with over 24 years of experience in cybersecurity governance, enterprise risk management, and regulatory compliance within high-security government environments. Proven ability to lead organizations from reactive security postures to mature, risk-driven governance models, aligning cybersecurity strategy with business objectives and strengthening compliance. Led multidisciplinary teams of 50+ professionals and delivered executive-level risk and compliance reporting.

Specialties

• Governance & Compliance
• ISO 27001
• Risk Management
• Security Auditing
• Third-Party Risk

Skills

• Cybersecurity Governance
• Information Security Governance
• Regulatory Compliance
• Security Audits
• Enterprise Risk Management
• Integrated Risk Management
• Incident Management
• NCA Framework
• SAMA CSF
• ISO/IEC 27001

20 skills in total

Licenses & Certifications

• Certified Information Security Manager (CISM)

  ISACA

  Issued Nov 2025

• Fortinet Certified Associate in Cybersecurity

  Fortinet

  Issued Nov 2025 · Expires Nov 2027

• McKinsey Forward Program

  McKinsey.org

  Issued Jun 2026

10 certifications in total

Experience

• Confidential Government

  • Head of Cybersecurity Governance & IT Risk Oversight

    May 2024 — Present

    Riyadh, Saudi Arabia

  • Administrative Communications Manager (Information Security & Governance)

    Jun 2018 — May 2024

    Riyadh, Saudi Arabia

  • Follow-up Section Manager – IT & Operational Governance

    Jun 2016 — Jun 2018

    Riyadh, Saudi Arabia

4 experiences in total

Education

• King AbdulAziz University

  Executive Master's in Engineering Management, Engineering Management

  Jun 2012 — Jun 2014

• King AbdulAziz University

  Executive Master's in Cybersecurity, Cybersecurity

  Aug 2023 — May 2025

3 education entries in total

Recent posts