At NEOM, I lead technology audit strategy, risk-based audit plans, and continuous control auditing initiatives across IT and cybersecurity.
I previously directed IT and cybersecurity audits at Tawuniya, covering SAMA and NCA requirements, network and endpoint security, IT governance, business applications, and business continuity management.
Over 13 years, I've managed vulnerability programs, cybersecurity compliance assessments, and GRC initiatives at Aramco, including expanding vulnerability-management scope by 40% and improving leaver deactivation by 40%.

