mohamed elhabashy

Owns the group ISMS under ISO/IEC 27001:2022 and leads the SOC 2 Type II programme end to end. Runs PCI DSS v4.0 certification and multi-regulator assurance over a cloud-based payments platform.

Client-side security lead for a UAE federal entity, reporting to the Chief of Central Services Sector. Designed and ran the ISO/IEC 27001:2022 ISMS and developed an AI security risk assessment framework aligned to ISO/IEC 42001 and NIST AI RMF.

Supported clients through ISO 27001 certification and assessed client security configurations, delivering prioritised remediation roadmaps. Deployed and governed endpoint, identity, email and data protection controls in hybrid Azure environments.

Advised regulated financial services clients across the UAE and KSA, from initial assessment and cybersecurity audit to remediation planning. Built control libraries, risk registers and compliance-mapped gap reports for SAMA CSF and NCA ECC programmes.

Owned cybersecurity risk governance and the risk register for one of Saudi Arabia's major banks, ensuring compliance with SAMA CSF, PCI DSS and ISO 27001. Supported regulatory and internal audits and led security design reviews for major transformation programmes.

Operated the bank's security control estate (SIEM, DLP, EDR, WAF, NGFW, IDS/IPS, FIM), producing control evidence for internal and SAMA audits and leading incident triage.

Managed presales activities for a business management company in Saudi Arabia.

Led the presales team at Raya Integration in Egypt.

Served as Senior Security Administrator at Egypt's national credit bureau.

Pursuing a Master of Science in Information Technology with a Cybersecurity concentration, expected to complete in December 2026.

Earned a Bachelor of Science in Accounting.