At Qatar National Bank (QNB) Egypt, I review and maintain the Information Security Framework, aligning it with ISO 27001, NIST CSF, PCI-DSS, and Central Bank of Egypt requirements. I also oversee policy and control compliance and track remediation.
I assess cybersecurity risks for business initiatives, technology projects, and process changes, and support regulatory examinations and audits with evidence and reports. My work includes identifying PCI-DSS compliance deficiencies and reviewing internet-facing systems and firewall connectivity requests.
I authored business cases, security requirements, and RFPs for Database Activity Monitoring, Network Detection & Response, and digital forensics platforms. I also identified network segmentation gaps and documented findings for remediation.
Before moving into GRC, I worked as a SOC Analyst – Tier 1 at QNB Egypt, monitoring events with IBM QRadar and conducting threat hunting using MITRE ATT&CK. I also led detection, containment, and post-incident documentation for a DDoS attack attributed to the R70 Group.
